Programmers need to recognize the common sources of input to Java applications, such as HTTP requests, Applet sockets and back-end databases. Authentication and session management.