The Spring Security project provides support for protecting web applications from malicious exploits. See the Spring Security reference documentation, including:

The use of presentation technologies in Spring WebFlux is pluggable. Whether you decide to use Thymeleaf, FreeMarker, or some other presentation technology, it mostly comes down to configuration changes. This chapter describes the presentation technologies integrated into Spring WebFlux. We'll assume you're already familiar with view resolution.