1.5 Security Misconfiguration

  1. Configuration Files

    Configuration files are securely placed inside the Classes folder of the WEB-INF folder which
          is not publicly accessible.

  2. Exception Handling in Java

    Different types of exceptions can rise in application. Java exceptions handled using try catch blocks available in java. Sometimes we use the Throw statement to throw an exception which is caught by the catch block. Caught exceptions will be written into the log files for the debug purpose whenever required. Whenever any exception occurs in application, proper information used to send to the front end user by showing alert.

  3. BI Publisher Reports – Generation and Access

    The application uses a sandbox for placing the generated reports file into a sandbox area. The sandbox is placed in a specified location (the location will be specified in the properties file) on the server. The application validates if the user has explicit Rights to generate Reports.