Hello-javasec Java Security Code Audit
Hello-javasec Code Audit
Environment: https://github.com/j3ers3/Hello-Java-Sec
Configure the database and start the project directly.
This project is built with Spring Boot.
Swagger and Actuator Unauthenticated Access
When examining dependencies, both Swagger and Actuator were present, so I reviewed their configurations.
Swagger had no securit ...
Posted on Thu, 06 Aug 2026 16:51:15 +0000 by maltech
Understanding WebEndpointProperties in Spring Boot with Practical Examples
Spring Boot's WebEndpointProperties class configures web endponit properties in actuator applications. This configuration class binds to properties prefixed with management.endpoints.web.
Key components of the class:
Base Path Configuraton:
private String basePath = "/actuator";
public String getBasePath() {
return this.basePat ...
Posted on Sun, 14 Jun 2026 17:33:53 +0000 by ludjer