xstream VS Thymeleaf

I hope we don't end up with the same things as the java world. JDK9 removed and moved to a library a few things like JAXB. Since JDK11, every new version is harsher for programs that use reflection to mess with non-published internals. Both are good changes, BTW.

In theory, you add a few libs and you're ready to upgrade. In practice, adding libs at scale is hard, and quite a few dependencies of dependencies of ... are using reflection to mess with internals.

As a result, there are still a lot of enterprise applications on JDK8 and JDK11, even if the security impact of this is bad and the fix should be easy.

For a typical example: see https://github.com/x-stream/xstream/issues/101

Thymeleaf is used for serving frontend resources in this service, and it has cache enabled for static resources based on content. Something like the following properties:

xmlns:th="http://www.thymeleaf.org"> th:text="${title}">Product List th:each="product : ${products}" th:text="${product.name}">

*with Thymeleaf and SpringSecurity 6 to build a regular web application and it uses Authgear to **add authentication with the login page

Finally, we will create a HomeController to make the test effect more visually significant by controlling the content displayed on the page. We will display different information according to the role and use the thymeleaf template engine to render.

Finally, we create the Controller class and use the thymeleaf template engine to build the home page information. Different permission information sees different results in the home page list.

Configure all requests here to require authentication and authorization, provide Form form authentication methods, and customize the login template through thymeleaf. The code here is not within the scope of this article, and the following will not Show specific details.

Then let's define the html page, here we use the thymeleaf template engine:

You can also use SSR (Server Sided Rendering) to generate the front end before it is returned, reducing the need for JS. Thymeleaf is an example of that.

You can use Java for Backend and Frontend. A relative new kid on the block for Frontend is Qute. The general keyword you are searching for is Java Templating Engine. Specific examples would be Thymeleaf or FreeMarker. There are some framework, which offer a lot more than templating like Vaadin or Wicket. Some are just specifications like Jakarta Faces with some of their implementations MyFaces or Mojarra.