3 ms·
J2EE reminds me of another blast from the past, a contract around the time for Java (Apache) Struts [1], boilerplate hell and not fun. Fun fact: Java (Apache)
by drawkbox 7y ago
J2EE reminds me of another blast from the past, a contract around the time for Java (Apache) Struts [1], boilerplate hell and not fun.
Fun fact: Java (Apache) Struts 2 [2] is a vulnerability mess. It was used by Equifax on the breach:
> Struts 2 has a history of critical security bugs, many tied to its use of OGNL technology; some vulnerabilities can lead to arbitrary code execution. In October 2017, it was reported that failure by Equifax to address a Struts 2 vulnerability advised in March 2017 was later exploited in the data breach that was disclosed by Equifax in September 2017. [2]
They probably went with Java EE because it was "secure", little did they know Struts would enter the game. Equifax I am sure treats their developers good by how often their software was updated /s.
[1] https://en.wikipedia.org/wiki/Apache_Struts_1 https://en.wikipedia.org/wiki/Apache_Struts_1
[1] https://en.wikipedia.org/wiki/Apache_Struts_2 https://en.wikipedia.org/wiki/Apache_Struts_2
- democracy 7y agojee is a set of interfaces, it cannot be secure or not.