I'm happy to put it into Struts but other committers may object on the basis
that one of the ActionForm's functions is to act as a 'firewall' between the
Request and the Action - the 'LazyActionForm' circumvents this with all the
request parameters being populated into it. In my Actions I only take out of
them what I expect to be there - if you do that its not an issue, but anyone
who just passed on whatevers in there straight on to their model would leave
themselves open to attack.

Also the LazyDynaBean/LazyDynaClass objects that the "Lazy" ActionForm
depends on are more suited to the beanutils project - maybe the first step
would be to submit these classes to beanutils and see if they are happy to
accept them.

Niall

----- Original Message ----- 
From: "Matthias Wessendorf" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 29, 2004 2:22 PM
Subject: LazyActionForm


> Hello,
>
> are there plans to integrate LazyActionForm form
> Nial Pemberton in to struts (or in contrib) ?
>
> since nial is a commiter and it is usefull
> to have that functionality *directly* in framework...
>
> regards,
> Matthias



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to