Struts validationframework
•Download as PPTX, PDF•
0 likes•216 views
The document discusses the Struts validation framework for web application security. It provides an overview of model-view-controller (MVC) architecture and web frameworks like Struts. The validation framework in Struts centralizes data flow and controls each input field by assigning validation rules defined in XML files. This allows enforcing max/min lengths, known valid values, and field formatting through regular expressions. The validation framework strengthens security by validating user-submitted data compared to applications without such frameworks.
More Related Content
Viewers also liked
Viewers also liked (12)
Similar to Struts validationframework
Similar to Struts validationframework (20)
Recently uploaded
Recently uploaded (20)
Struts validationframework
- 1. Struts validation framework WEB Application Security By Satish Govindappa
- 2. Structure what why how - MVC ? Concept and Origin Execution Process what why how - Web framework? Features what why how Validation framework?
- 3. Pentesters.. Applications are getting smarter Applications are getting tougher Old strategy may not work.. Strategy – outside inn to inside out Understanding of internals Defenders how to write/suggest defensive programming
- 5. Advantages MVC • Easier to Manage Complexity • Does not use view state or server based forms • Rich Routing Structure • Support for Test-Driven Development • Supports Large Teams Well
- 7. Validation Strategy • Centralize the data flow : Struts-config.xml – List the address of the input form • Control each piece of field(data) :Validation form – List each Include all input fields • Assign validation logic to each field:Validation.xml – For each field, specify one or more validation rules • Define validation logic : Validation-rules.xml – Max length, min length, knowngood validation • Bind each field to a Regular expression
- 8. Max length Min Length Knowngood Max length Min Length Known good Web App with out framework
- 9. Max length Min Length Knowngood Sturts- config.x ml Validati on.xml ^[0-9a-zA-Z]*$ 0123456789 abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ null123 ‘--1 Abx12p @!#$% null123 Abx12p null123 Abx12p Max length Min Length Knowngood
- 10. Web App with out framework
- 11. Regex ^[a-z0-9_-]{3,15}$ Characters allowed a to z (only small case) Numbers allowed 0 1 2 3 4 5 6 7 8 9 Special Chars allowed Underscore and Hyphen Max length 15 Min length 3
- 12. End.. Slides --- will be uploaded to null site and slide share… Need hands on… Scream for a bachaav session… I am open to take a session…