I cannot underscore how much of a mistake this would be. I would vigorously fight this decision to keep it off by default for a long time. I'm happy to put more constraints on the ability to invoke methods via the HTTP request, but I will not support turning it off by default. See my mini manifesto about defaults to understand why.
-1 --------------------------------------------------------------------- Posted via Jive Forums http://forums.opensymphony.com/thread.jspa?threadID=41363&messageID=82497#82497 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
