Which Java MVC Framework best aligns with the Web Application Security Framework Manifesto?

Question

Has anyone in the stackoverflow community ever studied the security characteristics of various J2EE frameworks? I would love to understand what framework best aligns with the Web Application Security Framework Manifesto http://labs.securitycompass.com/papers/secure-web-application-framework-manifesto-v0-08.pdf

Answer 1

I would use either Struts 2, or Spring. The security manifesto you say is just a standard. The truth is both frameworks are actively developed. If one presents any security issues, it's pretty sure the developers will work to fix it ASAP.

If you choose Spring, you can use Struts too.