Spotbugs VS Thymeleaf

SpotBugs is pretty good.

PMD, Spotbugs, Nullaway: Java linting/static analysis (https://pmd.github.io, https://spotbugs.github.io, https://github.com/uber/NullAway)

While at it you could also point them to static code analyzers such as error_prone, spotbugs and pmd (use all 3 at once - they complement each other in detecting different issues).

First, it's better to use SpotBugs 4.4.1 and above, that includes a fix to make SARIF report compatible with Github code scanning API requirements.

RUN wget https://github.com/spotbugs/spotbugs/releases/download/4.4.1/spotbugs-4.4.1.tgz

If you don’t have checkmarx/Vera code money, have you looked at https://find-sec-bugs.github.io/? It can be used with a few things such as https://spotbugs.github.io/ and sonarQ

some good tools for general code analysis (Java): Sonarqube, PMD, SpotBugs

Thymeleaf is used for serving frontend resources in this service, and it has cache enabled for static resources based on content. Something like the following properties:

xmlns:th="http://www.thymeleaf.org"> th:text="${title}">Product List th:each="product : ${products}" th:text="${product.name}">

*with Thymeleaf and SpringSecurity 6 to build a regular web application and it uses Authgear to **add authentication with the login page

Finally, we will create a HomeController to make the test effect more visually significant by controlling the content displayed on the page. We will display different information according to the role and use the thymeleaf template engine to render.

Finally, we create the Controller class and use the thymeleaf template engine to build the home page information. Different permission information sees different results in the home page list.

Configure all requests here to require authentication and authorization, provide Form form authentication methods, and customize the login template through thymeleaf. The code here is not within the scope of this article, and the following will not Show specific details.

Then let's define the html page, here we use the thymeleaf template engine:

You can also use SSR (Server Sided Rendering) to generate the front end before it is returned, reducing the need for JS. Thymeleaf is an example of that.

You can use Java for Backend and Frontend. A relative new kid on the block for Frontend is Qute. The general keyword you are searching for is Java Templating Engine. Specific examples would be Thymeleaf or FreeMarker. There are some framework, which offer a lot more than templating like Vaadin or Wicket. Some are just specifications like Jakarta Faces with some of their implementations MyFaces or Mojarra.