Technical Description HDIV

We can briefly define HDIV as a Secure Version of Struts. HDIV extends Struts behaviour by adding security functionalities, maintaining the API and Struts specification. This implies that we can use HDIV in applications developed in Struts in a transparent way to the programmer and without adding any complexity to the application development. It is possible to use HDIV in applications that don't use Struts, but in this case it is necessary to modify the application (JSP pages).

The security functionalities added to the original Struts version are these:

Integrity: HDIV guarantees integrity (no data modification) of all the data generated by the server which should not be modified by the client (links, hidden fields, combo values, radio buttons, destiny pages,.). Thanks to this property we avoid all the vulnerabilities based on the parameter tampering.
Confidenciality: GHDIV guarantees the confidentiality of the data as well. Usually lots of the data sent to the client has key information for the attackers such as database registry identifiers, column or table names, web directories, etc.

Eurohelp Consulting 2012