Skip to main content

TECHNICAL ANNEX

Search This Blog

About

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Lets make it short and straight forward:

IT Annex is
intended to share all kind of
information technology content.

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Popular Posts

Hidding Server Signature/Banner Information of Liferay Server

Liferay Servers include server banner information with every response it send back. These information can be venerable in respect to security of your website/portal. A sample response header is shown below, look highlighted lines: Date: Tue, 29 Jan 2013 11:02:43 GMT Content-Encoding: gzip Server: Apache/2.2.3 (Red Hat) ETag: "1a467a7a" Liferay-Portal: Liferay Portal Enterprise Edition 6.1.20 EE (Paton / Build 6120 / July 31, 2012) Vary: Accept-Encoding Content-Type: text/html;charset=UTF-8 Connection: Keep-Alive Content-Length: 9105 These information can be hidden on changed with very basic configurations in servers and portal.

Cross-Site Request Forgery (CSRF) Prevention in Liferay

What is CSRF? Cross-Site Request Forgery (CSRF)is a hidden attack that contains a malicious request. This is in top web vulnerabilities list because, the malicious request carries the identity, privileges, information and permissions of the victim to perform an proxy request on the victim's behalf. This can attack can be performed for any kind of operations like updating sensitive\confidential information, purchase something, transfer money etc. More about CSRF Prevention Measures To prevent CSRF attack a general recommendation to use Synchronizer Token Pattern , which suggest to include a random token with all form actions and links associated to confidential server action/operations.

Computer Software And Hardware Information using JAVA

The example provides various information about computer hardware and software. As listed below: 1. OS Installation date & Time 2. OS Serial Number 3. Motherboard Serial Number 4. Processor ID 5. Computer Name The program provides information as stream of data, It is your JOB how you will extract information from stream and utilize them?

Setting Auto Compelete off to Liferay AUI Forms

Hi Liferay developers, We all use AUI components extensively during our Liferay portal development, Right? While using AUI forms we may need to set autocomplete settings on our forms based on the sensitivity of the data our forms carries, like login form, credit card information forms etc. Now AUI form don't provide scope to set autocompelete , have a look here to all AUI form attributes. This also logged as known bug in AUI form and still in open state by the time this blog is written. Don't get disappointed, although autocompelete attribute is not available in AUI form we can still get it by just adding autocompelete attribute to AUI form as below, and it's done. <aui:form action="SOME_FORM_ACTION" method="POST" autocomplete="off"> // Form fields will go here </aui:form> Cheers!!!

Essential Security Configurations in Java web.xml File

Developing a safe, secure and stable Web Applications can be a painful task if you are not aware of all the capabilities your development environment provides. At the same point of time it will also make it very easy and manageable if you are aware of them. In this article we are going to look into some common but essential configurations for Java Web Applications deployment descriptor file WEB.XML . Authentication & Authorization Bypass Web Applications can have many kind of informations and data hosted to it which can include public, shared and private data for different group of users. It the job of developer to take care that, confidential or private data can only be accessed by owner of the data or by specific group of users.

Indent,Organize or Well-form XML Using Java

Below Code Well form, Organize or Indent plain or unorganized XML String using XML API in JDK 6. IndentXML.java import com.actl.dxchange.utilities.XMLUtil; import java.io.*; import javax.xml.parsers.*; import javax.xml.transform.*; import javax.xml.transform.stream.StreamResult; import javax.xml.transform.stream.StreamSource; import org.w3c.dom.*; /** * XMLTransformations Utilities. * @author Tejas Purohit */ public class IndentXML { public IndentXML() { } public static void main(String[] args) throws Exception { IndentXML t = new IndentXML(); String strXML = "<Employees><Employee Name='Amitabh Bachapan' Designation='Director'>"+ "<Address><AddressLine>Opp. Taj Square</AddressLine><City>Mumbai</City>"+ "<Country>India</Country></Address></Employee><Employee Name='Shah RukRukKhan'"+ " Designation='Manager'><Address&g

Apache Tika - Detect MIME Type of any file

Apache Tika - a content analysis toolkit The Apache Tika™ toolkit detects and extracts metadata and structured text content from various documents using existing parser libraries. You can find the latest release on the download page .

Code/Syntax Highlight in Blog

Its always a good practice to write a well formed and well managed source code but after putting much effort to write a nice and clean piece of code we often come into a situation that when we post it on Blogs or on Web pages it doesn't look as nice as it should look. Have a look at below java code: public class HelloWorld { public static void main(String[] args) { System.out.println("Hello World!"); // Display the string. } } I really don't like that my code looks like this and I am sure you also don't like it. but what if the same code looks like below: public class HelloWorld { public static void main(String[] args) { System.out.println("Hello World!"); // Display the string. } } This looks very neat and clean, right?

Xalan-Java Version 2.7.1 Extensions - Redirect

Xalan-Java Version 2.7.1 Extensions: Extension elements and functions provide a powerful mechanism for extending and simplifying what you can do with an XLST processor like Xalan. With input and contributions from the XML open-source developer community, we are working on placing the most useful extensions in an extensions library distributed with Xalan-Java. Redirect Extension: A standard XSL transformation involves an XSL stylesheet, an XML source tree, and the transformation result tree. The transformation sends the entire result to a single javax.xml.transform.Result object. The namespace for the Redirect extension is: http://xml.apache.org/xalan/redirect

implementing javax.servlet.ServletContextListener

Each web application has a ServletContext associated with it. The ServletContext object is created when the application is started and is destroyed when the application is shut down. A ServletContext has a global scope and is similar to a global variable in an application. ServletContextListener will gets notified when servlet context gets initialization and destroyed. A Simple example of implementing javax.servlet.ServletContextListener in your web application is shown below. You need to write one class implementing javax.servlet.ServletContextListener and it's methods. As shown below: ContextListenerIMPL.java package com.test; import javax.servlet.ServletContextEvent; import javax.servlet.ServletContextListener; public class ContextListenerIMPL implements ServletContextListener { /** Creates a new instance of ContextListenerIMPL */ public ContextListenerIMPL() { } public void contextInitialized(ServletContextEvent servletContextEvent) { //Code which should be exec

Powered by Blogger