Blogs

View all Blogs >>

In the Spotlight - David Chandler

David Chandler

JSF evangelist and Senior Engineer with Intuit

At Intuit, David has focused on writing secure JSF applications for the
Internet banking industry. An electrical engineer by trade, David got
hooked on developing dynamic Web applications in the days of NCSA
Mosaic and hasn't looked back since. He has written Web applications
professionally in a variety of languages, including C, perl, ksh,
ColdFusion, Java, and a domain-specific language built with lex and
yacc. He has tried to forget everything except JSF. David has
presented at ApacheCon and OWASP conferences as well as local user
groups, and is the author of one of the first books on Web
development, Running a Perfect Web Site (Que, 1995).

David holds a Bachelor of Science degree in Electrical Engineering
from the University of Kansas and a patent on a method of organizing
hierachical data in a relational database. He lives in Atlanta with
the wife of his youth and helps homeschool their five children. In his
copious spare time, David teaches classes through learnjsf.com and
works on RememberOneAnother.com, a prayer organizer and church
networking Web site built with JSF, Spring, and Hibernate.
















Presentations by David Chandler

Securing JSF applications against the OWASP top ten

In this section, we explore how JSF protects against these attacks and move on to explore JSF extensions you can deploy to provide complete protection against the OWASP Top Ten, including forced browsing, information leakage in select boxes, and unauthorized method execution. "