Riatrax Security: Protect against Web Attacks
Security is an essential extension of the Fybit Riatrax Toolkit and it also works with the Google Web Toolkit (GWT) and JSF applications (including ICEfaces and RichFaces). It secures your application by filtering malicious content and blocking it before it reaches your application code. Riatrax Security derives constraints on the interface between browser and web server by an application code analysis. These tailor-made rules ensure that only valid data enters your application and can be configured with Java annotations.
Additional built-in logic protects against very common attacks including Cross Site Scripting (XSS), SQL Injection, HTTP response splitting or characters known to be critical (like string termination symbols). Moreover, the filter also guarantees type safety. It knows whether the data sent is expected to be an integer, byte or character etc. and it blocks data of the wrong type or data that is outside the valid range.
