Application Security
在服务器上运行你的 Java 应用程序（请参见 客户端和服务器）包含了大量网络攻击的防护，甚至在你写下第一行代码之前。尽管如此，这并没有减轻你的责任。这些页面解释了界限的所在，webforJ 为你处理了什么，你需要负责哪些方面，以及如何保持生产部署的安全。
有关谁可以访问每个视图的控制，请查看 安全 部分的其余内容，了解身份验证和路由级授权。
主题
Common Threats
How common web threats such as cross-site scripting (XSS), cross-site request forgery (CSRF), and SQL injection apply to a webforJ app, what the framework handles, and where you stay responsible.
Production Hardening
Practical steps for running a webforJ app safely in production, from transport encryption and dependency upkeep to server-side checks and disclosure.
Managing Secrets
Keep database passwords, API keys, and other secrets out of your webforJ source tree and configuration files by resolving them at runtime.