Search code examples
javasecuritystrutsowasp

What security features are available in Struts?

I am tasked with developing a web application and am thinking of using the Struts framework as it seems to be a standard and is easy to implement.

However, before making a decision I need to know the security features available in Struts.

Are there effective ways to handle the OWASP Top 10 using Struts? And if so, how would I accomplish it?

Solution

  • Struts is there to offer you an MVC framework, and it has limited security features, e.g. you can map roles to actions. I will recommend you to look into something more full-fledged like the Spring Security (formerly Acegi).