Anyone have a code review checklist/guidelines for a Java web application? A review checklist for each layer would be great.
If there is no such source on the internet, do you know of any good books? I found some useful tips in "Expert One-On-One..." by Rod Johnson. Any other good books you recommend?
In a respones to a question in the same area that I've ased, someone suggested the book Patterns of Enterprise Application Architecture by Martin Fowler. I've yet to read, but it seems to have good reviews.
Even though it's more of a security specific set of guidelines, OWASP, has pointers in this area and a good number of external references.