DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=38534>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=38534 ------- Additional Comments From [EMAIL PROTECTED] 2006-02-11 03:48 ------- In Struts 2.x, I would advocate Java 5 annotations to say which properties are populatable (if that's a word). Since 2.x marries the form/action together and in a POJO, I could see more people taking interest in preventing this kind of behavior. For the 1.x branch, I think the easiest solution is to create a blacklist of properties to avoid (getPropertyBlackList)... or a white list (getPropertyWhiteList). Hey, I like developer options. I have think there is a need for these things -- both are purely optional and can be used either to say null, some properties, a single everything element (wildcard asterik). Or we could go more into details such as saying what level of nesting is appropriate. Perhaps I only want to limit to one-level; that would solve the problem attached to this ticket. Summary: [1] Whitelist of properties [2] Blacklist of properties [3] Annotations [4] Nesting level -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]