对许多Java开发者来说，应用程序的安全性常常被忽视。

事实上是，危险是突如其来的，你不仅应该知道你所面临的风险，同时也需要建立这样的意识：事先考虑到如何在软件开发中融入安全机制。

在这篇文章"Java developers can't afford to ignore app security" 中，专家阐述并强调了这样的观点， 应用安全问题不应放到最后在考虑。文中多次提到了"SQL injection"的问题。

Java developers can't afford to ignore app security
http://searchappsecurity.techtarget.com/originalContent/0,289142,sid92_gci1176445,00.html

更多：
More on SQL Injection from SearchAppSecurity
http://searchappsecurity.techtarget.com/featuredTopic/0,290042,sid92_gci1164790,00.html
More on cross-site scripting from SearchAppSecurity
http://searchappsecurity.techtarget.com/featuredTopic/0,290042,sid92_gci1159317,00.html