Hi,

I'm migrating from web app development using cgi to that using java
struts. Could someone tell me if web apps designed using java structs
have any particular security vulnerability? Are these web apps equally
prone to attacks such as XSS, SQL injection, buffer overflow just like
cgi or are they better/worse?

I would really appreciate it if someone could point me to links which
will give me details on testing webapps designed in java struts.

Thanks.