What are the common pitfalls to avoid in a jsp application in terms of security?
I am starting to work on a Fairly standard Jsp application. (Jsp,Oracle backend).

The security of the application is important. So what are the common(also uncommon ) Pitfalls that I should avoid as a novice.

Basically, Its just a few forms to get user input and some session management to display data according to user roles.

This discussion could serve as reference to future users also.

regards
What are the common pitfalls to avoid in a jsp application in terms of security?
===

I am starting to work on a Fairly standard Jsp application. (Jsp,Oracle backend).

The security of the application is important. So what are the common(also uncommon ) Pitfalls that I should avoid as a novice.

Basically, Its just a few forms to get user input and some session management to display data according to user roles.

This discussion could serve as reference to future users also.

regards