I wrote my own for the JCatapult MVC and it does most of the parameter setting stuff that OGNL does and a few other things like handling generics correctly and completely. It also has a pretty solid type conversion API. Took about 3 days to write, test and complete. Feel free to grab the code from the project. It should work well in any MVC with some tweaks at the type-conversion layer.

http://code.google.com/p/jcatapult

-bp


On Jul 16, 2008, at 11:56 AM, Musachy Barroso wrote:

Should we continue to use OGNL for parameter binding? This creates so
many possible security holes, in exchange for pretty much nothing,
when parameter names should be simple (indexing + the old A.B.C
notation).

Are there any uses cases where the full OGNL power is needed, for
parameter binding?

musachy

--
"Hey you! Would you help me to carry the stone?" Pink Floyd

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to