I was tasked to find vulnerabilities within a Java web application. I found XSS, SQLi, CSRF, as well as access control vulnerabilities.

I provide some suggestions as well as a potential detection mechanism.

… Continue readingSecure Software Development: Web