Prior to delivery to TCO, an application should be cleaned up so that all unused access points are removed from code deployed to application servers. This includes, but is not limited to, unused entries in Struts configuration files, Servlets, JSP, Cactus/JUnit test cases, and Main methods. These access points could be exploited by a hacker.
|