servlets or jsp: which is more secure

[lewindha]

I'm doing a project and I've never used jsp or servlets. I have to use one for this project. Which do you think is more secure? Any help would be appreciated.

[stiles]

A jsp engine is a pre-defined servlet. From what I understand Java does a pretty nice job of checking input, but ultimately it comes down to good coding practice.

If jsp will do what you need use it. If not write a custom servlet or look into a J2EE application server such as www.jboss.org (http://www.jboss.org) .