##Contents and Requirements ###Ch04_Output-Escaping Simple web application using JSPs to show the difference between doing output escaping via ESAPI and Apache Commons and not doing output escaping at all. Use an input like <script>alert('hello')</script> to see the difference. Keep in mind that some browsers (like Google Chrome) provide some XSS protection and may filter your input (Firefox works fine at the moment).
Requirements: Apache Tomcat
###Ch04_Output-Escaping-Spring Simple Spring based web application using JSPs to show the two different possibilities to show user input in a web page with ${contact.firstname} and <c:out value="${contact.firstname}" />. Use an input like <script>alert('Hello')</script> to see the difference. Keep in mind that some browsers (like Google Chrome) provide some XSS protection and may filter your input (Firefox works fine at the moment).
Requirements: Apache Tomcat
###Ch06_SQL-Injection
###Ch06_XPath-Injection
###Ch07_XSS
###Ch07_XSS_Filter
###Ch08_CSRF
##Setup All Java projects are created as Apache Maven projects. In Eclipse you therefore need to install the Maven integration and the git m2e connector via the update manager before you can import them as new projects.