Securing Apps
The following section provides information about security aspects of SAPUI5. The information is intended for SAPUI5 application and control developers, as well as to system administrators running applications based on SAPUI5.
SAPUI5 is a client-side JavaScript library, so while the library itself is designed and tested to be secure, it cannot ensure the application to be secure. Unlike WebDynpro, where the application is built against an abstract programming model and the framework handles the HTML rendering, JavaScript code and communication with the browser, in SAPUI5 the application controls the HTML output and provides its own JavaScript code. This code is executed on the client and it handles client/server communication.
While this brings a lot of freedom and possibilities for the application, it comes with a lot of responsibility with regards to security. Application developers need to understand the security threats and actively prohibit exploitation. Also important is the correct configuration of the used HTTP server.
Moreover, common security mechanisms, which are usually taken for granted, like user authentication, session handling, authorization handling, or encryption are not part of SAPUI5 and need to be handled by the server-side framework and/or custom code of the application.
SAPUI5 is not bound to any server implementation or server-side programming language and can, thus, be used with SAP NetWeaver AS for ABAP, Java, HANA XS Engine, or any standard web server. Therefore, the corresponding Security Guides also apply to SAPUI5.
For more information about specific topics, see the links in the table below.
| Content | Link |
|---|---|
| Security | http://service.sap.com/security |
| Security Guides | http://service.sap.com/securityguide |
| Related SAP Notes | http://service.sap.com/notes |
| Security Notes | https://support.sap.com/securitynotes |
| Released platforms | http://service.sap.com/pam |
| SAP Solution Manager | http://service.sap.com/solutionmanager |
| SAP NetWeaver | http://help.sap.com/nw_platform
 <Version>  Security Information Security Guide  and Secure Programming
Guide |