{"id":332,"date":"2009-11-13T09:45:24","date_gmt":"2009-11-13T14:45:24","guid":{"rendered":"http:\/\/www.webadminblog.com\/?p=332"},"modified":"2009-11-13T09:29:51","modified_gmt":"2009-11-13T14:29:51","slug":"securing-the-core-jee-patterns","status":"publish","type":"post","link":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/","title":{"rendered":"Securing the Core JEE Patterns"},"content":{"rendered":"<p>This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company.\u00a0 My notes from the session are below:<\/p>\n<ul>\n<li>Before anyone starts building complex systems, they need to design.<\/li>\n<li>We create threat models on completed designs.<\/li>\n<li>What about during design?<\/li>\n<li>Book: &#8220;Core J2EE Patterns Best Practices and Design Strategies&#8221;<\/li>\n<li>If you use J2EE development, chances are you&#8217;re using patterns documented here<\/li>\n<li>Core J2EE patterns are used extensively<\/li>\n<li>Patterns are used in JSF, Velocity, Struts, Tapestry, Spring, and Proprietary Frameworks<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline;\"><strong>Example: Project: Analyze Patterns<\/strong><\/span><\/p>\n<p>Use to Implement:<\/p>\n<ul>\n<li>Synchronization Tokens as Anti-CSRF Mechanism<\/li>\n<li>Page-level authorizations<\/li>\n<\/ul>\n<p>Avoid:<\/p>\n<ul>\n<li>XSLT and Xpath vulnerabilities<\/li>\n<li>XML Denial of Service<\/li>\n<li>Disclosure of information in SOAP faults<\/li>\n<li>Publishing WSDL files<\/li>\n<li>Unhandled commands<\/li>\n<li>Unauthorized commands<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline;\"><strong>Project Goals<\/strong><\/span><\/p>\n<ul>\n<li>Analyze patterns for security pitfalls to avoid<\/li>\n<li>Determine how patterns can implement security controls<\/li>\n<li>Provide advice portable to most frameworks<\/li>\n<\/ul>\n<p>A security pattern is not the same as a security analysis of a pattern.<\/p>\n<p><span style=\"text-decoration: underline;\"><strong>Uses<\/strong><\/span><\/p>\n<ul>\n<li>Designing new web application frameworks (make the next generation of frameworks secure by default)<\/li>\n<li>Designing new apps that use the patterns<\/li>\n<li>Source code review of existing apps<\/li>\n<li>Runtime assessment of existing apps<\/li>\n<li>Integrate with threat modeling of new or existing apps<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline;\"><strong>You can help:<\/strong><\/span><\/p>\n<ul>\n<li>Tell developers<\/li>\n<li>Improve the analysis<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline;\"><strong>Next Steps?<\/strong><\/span><\/p>\n<ul>\n<li>Add code review and examples to the existing pattern book<\/li>\n<li>Look at other pattern books to see if there are other patterns that we should analyze<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline;\"><strong>Our Dream<\/strong><\/span><\/p>\n<ul>\n<li>New web application framework idea + Design-time security analysis = Secure-by-default web application framework<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company.\u00a0 My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[307,4],"tags":[157,162,338,340,94,339,342,341,163,133,90,337,622,89],"class_list":["post-332","post","type-post","status-publish","format-standard","hentry","category-owasp-appsec-dc-2009","category-web-app-sec","tag-analysis","tag-best","tag-core","tag-design","tag-j2ee","tag-jee","tag-pattern","tag-patterns","tag-practices","tag-project","tag-secure","tag-securing","tag-security","tag-strategies"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Josh\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Web Admin Blog | Real Web Admins.  Real World Experience.\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Securing the Core JEE Patterns | Web Admin Blog\" \/>\n\t\t<meta property=\"og:description\" content=\"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2009-11-13T14:45:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2009-11-13T14:29:51+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Securing the Core JEE Patterns | Web Admin Blog\" \/>\n\t\t<meta name=\"twitter:description\" content=\"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#article\",\"name\":\"Securing the Core JEE Patterns | Web Admin Blog\",\"headline\":\"Securing the Core JEE Patterns\",\"author\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/author\\\/jsokol\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/#organization\"},\"datePublished\":\"2009-11-13T09:45:24-06:00\",\"dateModified\":\"2009-11-13T09:29:51-06:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#webpage\"},\"articleSection\":\"OWASP AppSec DC 2009, Web Application Security, analysis, best, core, design, j2ee, JEE, pattern, patterns, practices, project, secure, securing, Security, strategies\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.webadminblog.com\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/#listItem\",\"name\":\"Security\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/#listItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/web-app-sec\\\/#listItem\",\"name\":\"Web Application Security\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/web-app-sec\\\/#listItem\",\"position\":3,\"name\":\"Web Application Security\",\"item\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/web-app-sec\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#listItem\",\"name\":\"Securing the Core JEE Patterns\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/#listItem\",\"name\":\"Security\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#listItem\",\"position\":4,\"name\":\"Securing the Core JEE Patterns\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/category\\\/security\\\/web-app-sec\\\/#listItem\",\"name\":\"Web Application Security\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/#organization\",\"name\":\"Web Admin Blog\",\"description\":\"Real Web Admins.  Real World Experience.\",\"url\":\"https:\\\/\\\/www.webadminblog.com\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/author\\\/jsokol\\\/#author\",\"url\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/author\\\/jsokol\\\/\",\"name\":\"Josh\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/17951f69795527f90a4e9cb75ad6c9b3?s=96&d=identicon&r=pg\",\"width\":96,\"height\":96,\"caption\":\"Josh\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#webpage\",\"url\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/\",\"name\":\"Securing the Core JEE Patterns | Web Admin Blog\",\"description\":\"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/2009\\\/11\\\/13\\\/securing-the-core-jee-patterns\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/author\\\/jsokol\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/index.php\\\/author\\\/jsokol\\\/#author\"},\"datePublished\":\"2009-11-13T09:45:24-06:00\",\"dateModified\":\"2009-11-13T09:29:51-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/#website\",\"url\":\"https:\\\/\\\/www.webadminblog.com\\\/\",\"name\":\"Web Admin Blog\",\"description\":\"Real Web Admins.  Real World Experience.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.webadminblog.com\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Securing the Core JEE Patterns | Web Admin Blog","description":"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about","canonical_url":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#article","name":"Securing the Core JEE Patterns | Web Admin Blog","headline":"Securing the Core JEE Patterns","author":{"@id":"https:\/\/www.webadminblog.com\/index.php\/author\/jsokol\/#author"},"publisher":{"@id":"https:\/\/www.webadminblog.com\/#organization"},"datePublished":"2009-11-13T09:45:24-06:00","dateModified":"2009-11-13T09:29:51-06:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#webpage"},"isPartOf":{"@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#webpage"},"articleSection":"OWASP AppSec DC 2009, Web Application Security, analysis, best, core, design, j2ee, JEE, pattern, patterns, practices, project, secure, securing, Security, strategies"},{"@type":"BreadcrumbList","@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com#listItem","position":1,"name":"Home","item":"https:\/\/www.webadminblog.com","nextItem":{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/#listItem","name":"Security"}},{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/#listItem","position":2,"name":"Security","item":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/web-app-sec\/#listItem","name":"Web Application Security"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/web-app-sec\/#listItem","position":3,"name":"Web Application Security","item":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/web-app-sec\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#listItem","name":"Securing the Core JEE Patterns"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/#listItem","name":"Security"}},{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#listItem","position":4,"name":"Securing the Core JEE Patterns","previousItem":{"@type":"ListItem","@id":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/web-app-sec\/#listItem","name":"Web Application Security"}}]},{"@type":"Organization","@id":"https:\/\/www.webadminblog.com\/#organization","name":"Web Admin Blog","description":"Real Web Admins.  Real World Experience.","url":"https:\/\/www.webadminblog.com\/"},{"@type":"Person","@id":"https:\/\/www.webadminblog.com\/index.php\/author\/jsokol\/#author","url":"https:\/\/www.webadminblog.com\/index.php\/author\/jsokol\/","name":"Josh","image":{"@type":"ImageObject","@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/17951f69795527f90a4e9cb75ad6c9b3?s=96&d=identicon&r=pg","width":96,"height":96,"caption":"Josh"}},{"@type":"WebPage","@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#webpage","url":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/","name":"Securing the Core JEE Patterns | Web Admin Blog","description":"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.webadminblog.com\/#website"},"breadcrumb":{"@id":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/#breadcrumblist"},"author":{"@id":"https:\/\/www.webadminblog.com\/index.php\/author\/jsokol\/#author"},"creator":{"@id":"https:\/\/www.webadminblog.com\/index.php\/author\/jsokol\/#author"},"datePublished":"2009-11-13T09:45:24-06:00","dateModified":"2009-11-13T09:29:51-06:00"},{"@type":"WebSite","@id":"https:\/\/www.webadminblog.com\/#website","url":"https:\/\/www.webadminblog.com\/","name":"Web Admin Blog","description":"Real Web Admins.  Real World Experience.","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.webadminblog.com\/#organization"}}]},"og:locale":"en_US","og:site_name":"Web Admin Blog | Real Web Admins.  Real World Experience.","og:type":"article","og:title":"Securing the Core JEE Patterns | Web Admin Blog","og:description":"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about","og:url":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/","article:published_time":"2009-11-13T14:45:24+00:00","article:modified_time":"2009-11-13T14:29:51+00:00","twitter:card":"summary_large_image","twitter:title":"Securing the Core JEE Patterns | Web Admin Blog","twitter:description":"This presentation was by Rohit Sethi, the Project Leader for the Secure Pattern Analysis Project at OWASP and he works at Security Compass, a security analysis and training company. My notes from the session are below: Before anyone starts building complex systems, they need to design. We create threat models on completed designs. What about"},"aioseo_meta_data":{"post_id":"332","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2025-01-03 22:47:32","updated":"2025-07-17 07:15:29","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.webadminblog.com\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.webadminblog.com\/index.php\/category\/security\/\" title=\"Security\">Security<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.webadminblog.com\/index.php\/category\/security\/web-app-sec\/\" title=\"Web Application Security\">Web Application Security<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tSecuring the Core JEE Patterns\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.webadminblog.com"},{"label":"Security","link":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/"},{"label":"Web Application Security","link":"https:\/\/www.webadminblog.com\/index.php\/category\/security\/web-app-sec\/"},{"label":"Securing the Core JEE Patterns","link":"https:\/\/www.webadminblog.com\/index.php\/2009\/11\/13\/securing-the-core-jee-patterns\/"}],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pfI0c-5m","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts\/332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/comments?post=332"}],"version-history":[{"count":4,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts\/332\/revisions"}],"predecessor-version":[{"id":348,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts\/332\/revisions\/348"}],"wp:attachment":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/media?parent=332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/categories?post=332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/tags?post=332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}