model view controller - Why do we need an Spring MVC or Struts framework if we intend to proceed with single page apps -

model view controller - Why do we need an Spring MVC or Struts framework if we intend to proceed with single page apps -

i have design problem @ hand. traditionally had been developing spring mvc/struts/jsf applications either rest/soap service serving data.

now have html5 , other javascript frameworks. in light, still need create spring mvc applications such (assume info served restful service)

if go ahead pure html5, css ui (with ajax calls restful services), possible issues may into? approach have security holes beingness prone cross site scripting?

is approach start off with? approach called single page app?

you still need serve single page app somewhere, along w images , css files. spring mvc servlet, or whatever.

i'd spring info rest servlet creates restful hateoas endpoints you.

it's easier if spa , rest service on same domain, don't have worry cross-domain restrictions.

they still vulnerable xss, scheme unless take counter-measures. spring security can help here. create sure follow owasp guidelines.

use hibernate validator's @safehtml annotation prevent unsafe html input database. utilize spring security's <content-type-options/> , <xss-protection/> , , <header name="content-security-policy" value="..."/> settings help fighting xss.

spring model-view-controller single-page-application