Tuesday, November 29, 2011

I run a Web server. Am I at risk?

Not directly. But watch out for some newer servers that support "servlets". Servlets are fine if they are all written by the people running the server site; using servlets in this way is probably better than using CGI scripts. Going beyond this to let clients upload Java servlets into your server is very risky.
Category:Java Security Interview Questions

No comments:

Post a Comment