Book Image

Building Web Apps with Spring 5 and Angular

By : Ajitesh Kumar Shukla
Book Image

Building Web Apps with Spring 5 and Angular

By: Ajitesh Kumar Shukla

Overview of this book

Spring is the most popular application development framework being adopted by millions of developers around the world to create high performing, easily testable, reusable code. Its lightweight nature and extensibility helps you write robust and highly-scalable server-side web applications. Coupled with the power and efficiency of Angular, creating web applications has never been easier. If you want build end-to-end modern web application using Spring and Angular, then this book is for you. The book directly heads to show you how to create the backend with Spring, showing you how to configure the Spring MVC and handle Web requests. It will take you through the key aspects such as building REST API endpoints, using Hibernate, working with Junit 5 etc. Once you have secured and tested the backend, we will go ahead and start working on the front end with Angular. You will learn about fundamentals of Angular and Typescript and create an SPA using components, routing etc. Finally, you will see how to integrate both the applications with REST protocol and deploy the application using tools such as Jenkins and Docker.
Table of Contents (18 chapters)
Title Page
Credits
About the Author
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface

Best practices


The following are some of the best practices recommended by Angular in order to enhance web security:

  • Use the most up-to-date Angular libraries in the app. Attackers do exploit the security vulnerabilities present in previous versions. This is in line with one of the OWASP top 10 security vulnerabilities such as "Using Components with Known Vulnerabilities".
  • Avoid modifying the copy of Angular libraries. Doing so would lead to one getting stuck with that particular version of Angular, thus preventing one to update the Angular to latest version.
  • Use DomSanitizer APIs such as bypassSecurityTrust methods with utmost care. 
  • Avoid making use of Angular APIs which are marked as Security Risk in the documentation.