Book Image

Building Web Apps with Spring 5 and Angular

By : Ajitesh Kumar Shukla
Book Image

Building Web Apps with Spring 5 and Angular

By: Ajitesh Kumar Shukla

Overview of this book

Spring is the most popular application development framework being adopted by millions of developers around the world to create high performing, easily testable, reusable code. Its lightweight nature and extensibility helps you write robust and highly-scalable server-side web applications. Coupled with the power and efficiency of Angular, creating web applications has never been easier. If you want build end-to-end modern web application using Spring and Angular, then this book is for you. The book directly heads to show you how to create the backend with Spring, showing you how to configure the Spring MVC and handle Web requests. It will take you through the key aspects such as building REST API endpoints, using Hibernate, working with Junit 5 etc. Once you have secured and tested the backend, we will go ahead and start working on the front end with Angular. You will learn about fundamentals of Angular and Typescript and create an SPA using components, routing etc. Finally, you will see how to integrate both the applications with REST protocol and deploy the application using tools such as Jenkins and Docker.
Table of Contents (18 chapters)
Title Page
Credits
About the Author
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface

Common web application security vulnerabilities


In this section, you will learn about some of the common web application securities as specified by Open Web Application Security Project (OWASP) standards (https://www.owasp.org/), against which web applications need to be protected. Angular comes with a built-in support for protecting app against following security vulnerabilities:

  • Cross-Site Scripting (XSS)
  • Cross-Site Script Inclusion (XSSI)
  • Cross-Site Request Forgery (CSRF)

What is Cross-Site Scripting (XSS)?

Cross-Site Scripting (XSS) is one of the most common web application security vulnerabilities found in web applications. Using Cross-Site Scripting, attackers inject the the data or malicious code such as HTML/JavaScript code into web pages by sending untrusted data to the server. The attacker-injected data is not handled properly using one or more mechanisms such as content (HTML/JavaScript) escaping, leading to some of the following outcomes, which can all be called XSS attack:

  • Deface...