List: websecurity@lists.webappsec.org
From: Stephen de Vries
Re: [WEB SECURITY] Apache Struts vs. Wicket - security?
Mon, May 23, 2011 8:44 AM
Jari,
It is possible to build secure web applications using either of those frameworks. The question then becomes: "which one offers the best security by default". At the web tier there will only be a handful of features that will be relevant to security, so I would look for:
- Anti-XSS: Does the framework encode HTML content in fields by default?