GlassFish Security book, by author Masoud Kalali, covers Java EE security model and how to design and develop secure Web and EJB modules in Java EE applications and deploy them to GlassFish server environment. InfoQ spoke with Masoud about the book and the new security features in Java EE 6 release.
.jpg)
InfoQ's Stefan Tilkov questioned lead developers of Apache Axis2, Apache CXF, Spring Web Services, JBossWS and and Sun’s Metro about their design goals, their approach towards Java and Web services standards, data binding, accessing XML, interoperability, REST support, and framework maturity. The results revealed many similarities and some noteworthy differences.
Security researcher Alexander Klink and Julian Wälde revealed a serious vulnerability that until recently affected the vast majority of web server. The attack only requires a single HTTP request that is specially designed to create hash code collisions in POST form data. When first discovered this attack affected Python, Ruby, PHP, Java, and ASP.NET, but vendors have been working on patches.
The latest version of GlassFish application server supports JavaEE 6 Web Profile & Full Platform, improved OSGi support, clustering and high availability. Oracle recently released version 3.1 of commercial (Oracle GlassFish Server) and community (GlassFish Server Open Source Edition) versions of the server. New release also provides centralized administration and improved JDBC monitoring.
At Monday's JavaOne keynote in San Francisco, Oracle EVP Thomas Kurian highlighted Oracle's plans for the Java platform with a three-year roadmap and demos of JavaFX and other technologies. Elsewhere it announced plans for JavaFX 2.0 and the decision to drop JavaFX Script.
When Oracle released its GlassFish roadmap, a notable absence was the GlassFish gem. This gem-based server for Rails, Merb, and Sinatra applications has become a common deployment option for the JRuby platform and has been widely recommended to the JRuby community. The gem allows Rails users running in multithreaded mode to take advantage of the JVM by running multiple threads per server instance.
Yesterday Oracle published the roadmap for GlassFish version 3 and the news is positive. GlassFish version 3.1, expected this year, will offer centralized admin, clustering and Coherence support.
After almost nine months of speculation and delay, Oracle has got the green light from EU which has lead to the completion of Sun’s acquisition. The announcement was followed by an all-day event were Oracle presented its future plans for the Sun technologies and platforms.
Since the last bundle.update, a number of interesting events have occurred in the OSGi and modular Java space. JSR 294 has been (automatically) marked as inactive, the Enterprise Expert Group has released draft 4, WebSphere will allow direct running of OSGi applications and upcoming OSGi conferences have early bird discounts and call for speakers finishing soon.
