Open Source Web Frameworks in Java

Struts

Turbine

Tapestry

WebWork

Cocoon

Maverick

Echo

SOFIA

Verge

Anvil

Jaffa

Japple

JPublish

Jucas

MyFaces

WebOnSwing

Chrysalis

VRaptor

Swinglets

Millstone

Wicket

SwingWeb

Trimpath Junction

Macaw

Makumba

Barracuda

Calyxo

RIFE

DWR

JSPWidget

JOSSO

JAT

OpenXava

Stripes

Click

ZK

Caramba

wingS

Helma

Restlet

Brill

jZeno

ztemplates

Aranea Web Framework

RSF

Strecks

Hamlets

Google Web Toolkit

Aurora

ThinWire

Pustefix

Roma Meta Framework

jWic

Mentawai

fleXive

Vroom

AribaWeb

Flower framework

Sombrero

Induction

OWASP Top 10 Secure for web Application

The OWASP Top 10 Web Application Security Risks:

• A1: Injection
• A2: Cross-Site Scripting (XSS)
• A3: Broken Authentication and Session Management
• A4: Insecure Direct Object References
• A5: Cross-Site Request Forgery (CSRF)
• A6: Security Misconfiguration
• A7: Insecure Cryptographic Storage
• A8: Failure to Restrict URL Access
• A9: Insufficient Transport Layer Protection
• A10: Unvalidated Redirects and Forwards

Disable Browser Cache

Every time you use your web browser, your computer collects information about how you use it as well as generating local copies of files and documents you have viewed. This information is stored in folders on your hard drive and can be accessed by navigating to that folder or using a viewing utility within the web browser itself. Items that are stored include the cookies that the site you visit creates to store your preferences or

login information

, image files, html pages, PDF documents and even video files. In short, anything that you can access through the internet.

Advantages:-
~~~~~~~~~~~~~~
*. his automatic caching can be convenient, as it helps increase the speed of the page loading on your next visit

DisAdvantages:-
~~~~~~~~~~~~~~~~
*. it's also a major privacy risk.

Note: You may be visiting sites that you don't want others in your family to visit or maybe you want to ensure important username and password are kept private

Clear Login Credentials and Menu Constructing page based on Permissions etc..

For JSP,JSF:-
Apply this below code in all your view files..


             <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
            <meta http-equiv="Cache-control" content="no-cache"/>
            <meta http-equiv="Cache-control" content="no-store"/>          
            <meta http-equiv="Pragma" content="no-cache">
            <meta http-equiv="expires" content="0">

             <%
                        response.setHeader("Cache-Control", "no-cache");
                        response.setHeader("Pragma", "no-cache");
                        response.setDateHeader("Expires", 0);
                        response.setHeader("Cache-Control", "no-store");
            %>