Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread VANKEISBELCK Remi
Souvenirs, souvenirs... To be honest I someimes miss those endless threads
on TSS, was quite funny over there at the time. Now it's just advertisement
and ohter bullshit.

Cheers

Remi - and Rolf...

2010/10/28 Freddy Daoud xf2...@fastmail.fm

  On the source forge page of Stripes I see the text:
 
  Source forge description: It's stripey and it doesn't suck
 
  I don't know what 'stripey' is, but I think 'suck' is really
  inappropriate
  language for a serious product as The Stripes Framework...
 
  http://sourceforge.net/projects/stripes/

 Back in 2005, TheServerSide was the forum for many a web framework
 animated flame war. People were finally realizing that Struts
 was asking way too much work from the developer and doing way too
 little work for the developer in return--others knew it all along--
 and Tim Fennell's intelligent and insightful comments were signed
 with a link to Stripes and the caption: Because web development
 doesn't have to suck. This caught my eye because it was a bold
 statement.

 Now, 2010 closing out, TSS is still the (a) site for animated
 flame wars, Struts has been replaced by JSF which is just as bad,
 but it takes a Spring vs Java EE thread; just your run-of-the-mill
 here's my new framework post doesn't make people waste their
 time anymore. Stripes has matured and perhaps, Karen, you are
 right, we shouldn't use 'suck' in our tagline.

 So, after all the brou-ha-ha-ha-ha of getting Stripes back
 into action, let's hear suggestions for a new, catchy, witty,
 smart, attractive tagline.

 Don't ask for mine, I've already used it for a book title ;)

 Cheers,
 Freddy


 --
 Nokia and ATT present the 2010 Calling All Innovators-North America
 contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
 marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
 http://p.sf.net/sfu/nokia-dev2dev
 ___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


[Stripes-users] I18n parameters inside Stripes tags

2010-10-28 Thread Grzegorz Krugły
If I do

s:submit name=orderButton/

the orderButton will be looked up in my i18n.properties file and its
value will be placed on the button.
Is there any way to replace {0}, {1}, etc. in this value with my
parameters? I mean, like fmt:param can be added inside fmt:message?

If not, how can I override the value in my JSP? If I do

s:submit name=orderButton value=my new value/

the button still takes its caption from i18n file :-(


--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] I18n parameters inside Stripes tags

2010-10-28 Thread Grzegorz Krugły
As usually, after asking, I found out how to do it myself.
I already had 1.5.x branch checked out (it makes Stripes work with
Glassfish 3), so I just applied patch found here
http://www.stripesframework.org/jira/browse/STS-679 and rebuilt. It works.

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Thorough XSS Solution...

2010-10-28 Thread Mike McNally
You're right, and I apologize for that.  My initial statement that I
disagree was enough.


On Thu, Oct 28, 2010 at 1:01 AM, Nikolaos Giannopoulos 
nikol...@brightminds.org wrote:

  Mike,

 Offhand, telling anyone they are absolutely wrong and speaking to them by
 saying that does not mean that I think you're a bad person and that person
 seem[s] like a wonderful man comes off as being quite arrogant.  I'm not
 sure what compels you to make such statements no matter how badly you
 disagree with what anyone is saying... .

 You make some very interesting arguments...

 However, sanitizing via deletion or dis-allowing certain characters
 is just plain silly IMHO and if you carefully read my initial post you
 will see that is not what I suggested NOR what is commonly suggested for
 preventing XSS attacks.  If people like those that develop banking web sites
 decide to take a draconian view then that is unfortunate but that is not
 what we are talking about here within the context of sensible
 development.  In other words taking characters like ', , , etc... and
 escaping them to \', lt;, gt;, etc... to be presented on a web page is
 something that has ZERO negative effect on the user's input and does has not
 prevented the user from expressing themselves in any way, shape or form.
 The comment about O'Hara is equally dismissed as it can be encoded as
 O#x27;Hara which when presented in a web page looks exactly like O'Hara
 to the user;  so there is once again no need to disallow ' characters as you
 argue.

 The point that you raise that is most interesting is that Data
 sanitization is a *presentation* problem, not an input problem.

 While this is debatable and not by any means black  white IMHO... I will
 agree because although 99% of the time our data will be presented in HTML
 there is the time when we send HTML E-mails that we will also send a Plain
 Text version along with it in case the users e-mail client does not display
 HTML... in such a case O#x27;Hara won't cut it.

 So delaying to sanitize at presentation time is beneficial if you are
 dealing with multiple output formats or want to maintain that flexibility
 BUT there is no free lunch as delayed sanitization is less performant on a
 high read - low write - web app (such as ours).

 --Nikolaos




 Mike McNally wrote:

 For what it's worth, I entirely disagree with the idea that all input must
 be sanitized on the way in. That reflects a fundamental misunderstanding of
 the generalized problem of which XSS is just one manifestation.

  User input is user input. What's important (vital, I'd say) is for the
 software to be sensitive to the fact that user input may end up being
 presented to ignorant parsers for interpretation. A good example is SQL.
  There's nothing wrong with the name O'Hara.  It's somebody's name, and we
 cannot and should not disallow somebody from using that string as their
 name. But because that name contains the single-quote character, it's
 important that the server software takes care with it whenever it's being
 used in a SQL query.  Similarly, the presentation layer might need to be
 careful should that name need to be used in a Javascript string, or in an
 HTML attribute value.

  Quoting of user-supplied data needs to be done at the point that the
 values are being handed over to another (ignorant) agent for
 re-interpretation. HTML is just one of many such cases. It makes absolutely
 no sense to pick one potential destination environment as the critical
 target for data sanitization. This point is made clearly evident by
 considering the fact that the requirements for protecting user-supplied
 strings from misinterpretation by an HTML/XML parser are completely
 different from those necessary to protect against Javascript
 misinterpretation.

  Data sanitization is a *presentation* problem, not an input problem.
 There may of course be guidelines about what certain particular input fields
 look like; obviously an ampersand is inappropriate in a phone number. But
 whenever I use a bank website written by clearly incompetent contractors
 that disallows my use of ampersands in secure messages to customer
 support, I'm reminded of how rare it is that this truism is misunderstood
 (or not understood at all) in the web application development community.

  Thus, Niklolaos, I think you're absolutely wrong.  That does not mean
 that I think you're a bad person. Indeed, from your many posts on this
 mailing list, you seem like a wonderful man. I ask simply that you consider
 the fundamental nature of the problem. If I want to submit a description
 for some data entry, and my description includes angle brackets and
 ampersands, why would you disallow that?  It's my comment or description,
 after all. I may have a very good reason to use those characters.  The fact
 that they're HTML metacharacters is probably completely unknown to your
 typical user.  They see the characters on the keyboard, and they feel
 entitled to use 

Re: [Stripes-users] Thorough XSS Solution...

2010-10-28 Thread Søren Pedersen
Hi Nikolaos
Of course there can be no black and white. I completely agree with that. I
guess my point is right for my application, which is then best practice
for that environment. If your app demands that you turn it around to prevent
xss on input instead of output, that seems to be best practice for you.

Now, I whished I could present some kind of generic wrapper that does stuff
by magic with no performance overhead. However, each time I have tried to
create such a mechanism, and thought it was pretty cool, after a while it
falls short for some reason, since it doesn't protect from misunderstanding
the need for it.

In my opinion each developer must know what he is doing. You can help by
applying patterns, but you need to make people think. That's the most
important experience I learned.

We use fn:escapeXml in the jsp and other encoding and make sure that people
know why this is important.

PreparedStatements are always used when accessing databases.

There is no magic in my opinion - only thinking about what you are doing :))

Regards
Søren

Den 28/10/2010 19.31 skrev Nikolaos Giannopoulos nikol...@brightminds.org
:

 Soren,

You make 2 very short but interesting points which I agree with:


1) If you are dealing with many outputs then sure delaying sanitizing
until presentation is the way to go.  If you expect your data to 100% of the
time appear in HTML then I don't think its so black  white as this approach
would come with a hefty cost in performance in a high read low write web
app.  Besides performance hit the other not so pleasant aspect of delaying
is that there really isn't a single interface to sanitize and there's a
lot of unnecessary boiler plate.

That is to say in the case of HTML, you need to:

a) Wrap whatever is presented in view JSPs in say fn:escapeXml calls - which
is trivial but so darn repetitive.  Not a major issue though but rather ugly
and repetitive.

b) Hand encode parameter values (think {1}) appearing in error messages
displayed back to the user.

How did you resolve a) and b) in an elegant way?  Did you use formatters or
do something else???


2) As you point out using Parameterized Queries or Prepared Statements with
variable bindings does indeed thwarte SQL Injection attacks.  I wasn't aware
of that.  The key is that the JDBC driver encodes the variables.  One
needs to be careful though not to plug-in string insert parameters into
queries as that exposes the problem again.

Alas, with respect to SQL Injection there does indeed appear to be a free
lunch.


Thanks,

--Nikolaos




Søren Pedersen wrote:



 In my application we are dealing with many outputs, so I agree with the
point Mark made.
 As f...

--


 --
 Nokia and ATT p...



 
 ___
 Stripes-us...



-- 
Nikolaos Giannopoulos
Director of Information Technology
BrightMinds Software Inc.
e. nikol...@brightminds.org
w. www.brightminds.org
t. 1.613.822.1700
c. 1.613.797.0036
f. 1.613.822.1915


--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Oscar Westra van Holthe - Kind
On 27-10-2010 at 21:27, Freddy Daoud wrote:
 So, after all the brou-ha-ha-ha-ha of getting Stripes back
 into action, let's hear suggestions for a new, catchy, witty,
 smart, attractive tagline.
 
 Don't ask for mine, I've already used it for a book title ;)

One option:
Stripes... the skidmarks I leave because this framework isn't a straitjacket.

(IMHO not really 'mature' though)


Another option:
Stripes: the best way to visualize rapid development.



Oscar

-- 
   ,-_  Oscar Westra van Holthe - Kind  http://www.xs4all.nl/~kindop/
  /() )
 (__ (  Progress is made by lazy men looking for easier ways to do things.
=/  ()  -- Robert Heinlein


signature.asc
Description: Digital signature
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


[Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Nikolaos Giannopoulos
Hi,

We have the following:
@UrlBinding(/share/{id}/{titleUrlified}/${event})

Where id is a Long and titleUrlified is a String

When we test the following url:
/share/0/anything/edit

We get the following binding:
id=0
titleUrlified=anything/edit

and the @DefaultHandler view() method gets invoked vs. the edit() method

Why is titleUrlified NOT set to anything?  Why is the binding so 
aggressive?
Hopefully I am doing something silly.  Anyone

--Nikolaos

P.S.  I haven't tested 1.5.3 (yet)... as it is quite a pain to switch 
between the 2... (at the moment)


--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Thorough XSS Solution...

2010-10-28 Thread Oscar Westra van Holthe - Kind
On 27-10-2010 at 20:13, Rick Grashel wrote:
 I would recommend reading OWASP.org regarding this stuff.  Their best
 practices on XSS as well as SQL injection are very good.
 
 http://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet
 
 -- Rick

A very good point.

One thing I'm missing in this thread though is that, AFAIK, cross site
scripting attacks can also take the form of fully correct, sane user input!
The important part here is that the user has not performed the action, but a
script does it for them.

As always, it's a matter of balancing risk and damage.

For administrative applications it's usually enough that the data can be
altered later. This then undoes the attack.

For financial transactions, like internet banking and e-commerce, each
transaction is usually authenticated separately. Combined with feedback on
the actual transaction, this mitigates the risk of scripts spending your
money quite well (it makes any attack visible).


Oscar

-- 
   ,-_  Oscar Westra van Holthe - Kind  http://oscar.westravanholthe.nl/
  /() )
 (__ (  Simplicity is prerequisite for reliability.
=/  ()  -- Edsger Dijkstra, EWD498


signature.asc
Description: Digital signature
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Oscar Westra van Holthe - Kind
On 28-10-2010 at 14:50, Nikolaos Giannopoulos wrote:
 We have the following:
 @UrlBinding(/share/{id}/{titleUrlified}/${event})
 
 Where id is a Long and titleUrlified is a String
 
 When we test the following url:
 /share/0/anything/edit
 
 We get the following binding:
 id=0
 titleUrlified=anything/edit
 
 and the @DefaultHandler view() method gets invoked vs. the edit() method
 
 Why is titleUrlified NOT set to anything?  Why is the binding so 
 aggressive?
 Hopefully I am doing something silly.  Anyone

This looks like the same difference as regular expressions have in greedy vs.
reluctant operators. Since the event is optional and a String may contain a
/, it's possible for the String to bind everything.

Several choices can be made here:
- there can be at most one String parameter, and it must be the last (the
  current greedy binding then works as expected)
- all parameters are required (AFAIK this is not the case now)
- new syntax is added to allow reluctant binding (as opposed to greedy)
- any combination of these (and others)

I'm not sure what choice is the best, but in my experience using the first
one is a workaround for the problem you're having now (although it may not be
an option given your requirements).


Oscar

-- 
   ,-_  Oscar Westra van Holthe - Kind  http://www.xs4all.nl/~kindop/
  /() )
 (__ (  The haves and the have-nots can often be traced back to the
=/  ()  dids and the did-nots.


signature.asc
Description: Digital signature
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Dual Form... Log-in and Sign-up

2010-10-28 Thread Oscar Westra van Holthe - Kind
On 27-10-2010 at 17:38, Nikolaos Giannopoulos wrote:
 Just about to build a horizontally split Log-in / Sign-up form and I was 
 thinking...
 
 The Log-in form entails a simple user name and password
 The Sign-up form entails a wizard like interface for a multi-page set of 
 forms
 
 I am considering 2 options:
 1) 2 ActionBeans... [...]
 2) 3 ActionBeans [...]
 
 I know that splitting the forms into 2 separate pages is obviously the 
 simple solution but alas requirements are otherwise... .
 
 Any pointers on how others have tackled or would tackle such a problem?

Your second option is best.

Both have each form submit to a different ActionBean, which is exactly what
you want. The second option though, allows each of the three beans to have
it's own page. Combined with a custom ActionBeanContext, in which you can
override the value of getSourcePageResolution(), you can do this:

ActionBean 1 displays the page with both forms.

ActionBean 2 handles login, but upon input errors it forwards the user to a
page with only the login form (this form will need to be identical to the one
on the first page, so you may want to use an include here).

ActionBean 3 does something similar, but for the first (second, ...) page of
the sign-up wizard. The same caveat applies to the form.


Oscar

-- 
   ,-_  Oscar Westra van Holthe - Kind  http://www.xs4all.nl/~kindop/
  /() )
 (__ (  It takes less time to do a thing right, than it does to explain why
=/  ()  you did it wrong.  -- Henry Wadsworth Longfellow


signature.asc
Description: Digital signature
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Nathan Maves
I believe you need to move the $ inside the curly braces.

{$event}

Nathan

On Thu, Oct 28, 2010 at 12:50 PM, Nikolaos Giannopoulos 
nikol...@brightminds.org wrote:

 Hi,

 We have the following:
 @UrlBinding(/share/{id}/{titleUrlified}/${event})

 Where id is a Long and titleUrlified is a String

 When we test the following url:
 /share/0/anything/edit

 We get the following binding:
 id=0
 titleUrlified=anything/edit

 and the @DefaultHandler view() method gets invoked vs. the edit() method

 Why is titleUrlified NOT set to anything?  Why is the binding so
 aggressive?
 Hopefully I am doing something silly.  Anyone

 --Nikolaos

 P.S.  I haven't tested 1.5.3 (yet)... as it is quite a pain to switch
 between the 2... (at the moment)



 --
 Nokia and ATT present the 2010 Calling All Innovators-North America
 contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
 marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
 http://p.sf.net/sfu/nokia-dev2dev
 ___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Ben Gunter
For event names, the $ goes inside the {}, not outside. So ...

@UrlBinding(/share/{id}/{titleUrlified}/{$event})

I'm sure I will forever regret making that bit of syntax so similar to EL.

-Ben

On Thu, Oct 28, 2010 at 2:50 PM, Nikolaos Giannopoulos 
nikol...@brightminds.org wrote:

 Hi,

 We have the following:
 @UrlBinding(/share/{id}/{titleUrlified}/${event})

 Where id is a Long and titleUrlified is a String

 When we test the following url:
 /share/0/anything/edit

 We get the following binding:
 id=0
 titleUrlified=anything/edit

 and the @DefaultHandler view() method gets invoked vs. the edit() method

 Why is titleUrlified NOT set to anything?  Why is the binding so
 aggressive?
 Hopefully I am doing something silly.  Anyone

 --Nikolaos

 P.S.  I haven't tested 1.5.3 (yet)... as it is quite a pain to switch
 between the 2... (at the moment)



 --
 Nokia and ATT present the 2010 Calling All Innovators-North America
 contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
 marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
 http://p.sf.net/sfu/nokia-dev2dev
 ___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Aaron Porter
Hi Nikolaos,
Try:
@UrlBinding(/share/{id}/{titleUrlified}/{$event})

The difference is the $ should be inside the bracket.

Aaron

On 10/28/2010 11:50 AM, Nikolaos Giannopoulos wrote:
 Hi,

 We have the following:
 @UrlBinding(/share/{id}/{titleUrlified}/${event})

 Where id is a Long and titleUrlified is a String

 When we test the following url:
 /share/0/anything/edit

 We get the following binding:
 id=0
 titleUrlified=anything/edit

 and the @DefaultHandler view() method gets invoked vs. the edit() method

 Why is titleUrlified NOT set to anything?  Why is the binding so
 aggressive?
 Hopefully I am doing something silly.  Anyone

 --Nikolaos

 P.S.  I haven't tested 1.5.3 (yet)... as it is quite a pain to switch
 between the 2... (at the moment)


 --
 Nokia and ATT present the 2010 Calling All Innovators-North America contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
 http://p.sf.net/sfu/nokia-dev2dev
 ___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users



--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Søren Pedersen
What about:
Stripes - because it's simple

Den 28/10/2010 22.14 skrev Nikolaos Giannopoulos nikol...@brightminds.org
:

On a more serious note... I agree with Karen.

In fact... IMO its always better in marketing to differentiate yourself
(and speak to your audience) with what you do well...

How about something like:
Stripes:  The robust and intuitive Java web framework

--Nikolaos


 2010/10/28 Freddy Daoud xf2...@fastmail.fm mailto:xf2...@fastmail.fm


  On the source forge page of Stripes I see the text:
 
  Source forge descript...
 mailto:Stripes-users@lists.sourceforge.net

 https://lists.sourceforge.net/lists/listinfo/stripes-users



--...
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Evan Leonard

I like it.

On Oct 28, 2010, at 2:26 PM, Søren Pedersen wrote:

 What about:
 Stripes - because it's simple
 
 
 Den 28/10/2010 22.14 skrev Nikolaos Giannopoulos 
 nikol...@brightminds.org:
 
 On a more serious note... I agree with Karen.
 
 In fact... IMO its always better in marketing to differentiate yourself
 (and speak to your audience) with what you do well...
 
 How about something like:
 Stripes:  The robust and intuitive Java web framework
 
 --Nikolaos
 
 
  2010/10/28 Freddy Daoud xf2...@fastmail.fm mailto:xf2...@fastmail.fm
 
   On the source forge page of Stripes I see the text:
  
   Source forge descript...
 
  mailto:Stripes-users@lists.sourceforge.net
  https://lists.sourceforge.net/lists/listinfo/stripes-users
 
 
 
 --...
 
 
 --
 Nokia and ATT present the 2010 Calling All Innovators-North America contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
 http://p.sf.net/sfu/nokia-dev2dev___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Evan Leonard

the other thing that people keep talking about is how Stripes is (or nearly is) 
feature complete.  So how about:

Stripes - simple  complete.


On Oct 28, 2010, at 2:26 PM, Søren Pedersen wrote:

 What about:
 Stripes - because it's simple
 
 
 Den 28/10/2010 22.14 skrev Nikolaos Giannopoulos 
 nikol...@brightminds.org:
 
 On a more serious note... I agree with Karen.
 
 In fact... IMO its always better in marketing to differentiate yourself
 (and speak to your audience) with what you do well...
 
 How about something like:
 Stripes:  The robust and intuitive Java web framework
 
 --Nikolaos
 
 
  2010/10/28 Freddy Daoud xf2...@fastmail.fm mailto:xf2...@fastmail.fm
 
   On the source forge page of Stripes I see the text:
  
   Source forge descript...
 
  mailto:Stripes-users@lists.sourceforge.net
  https://lists.sourceforge.net/lists/listinfo/stripes-users
 
 
 
 --...
 
 
 --
 Nokia and ATT present the 2010 Calling All Innovators-North America contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
 http://p.sf.net/sfu/nokia-dev2dev___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Nikolaos Giannopoulos
Many take from the word simple alone to imply not feature rich.
So adding some sort of qualifier is great but I am not sure that 
complete is the word.

Nothing in software is ever complete unfortunately.
(Not trying to start a flame war with those that believe Stripes is 
complete...
 I just don't think it is complete... heavily feature rich - sure... 
complete - No - IMHO).

Just my 2cents...

--Nikolaos



Joaquin Valdez wrote:
 I like it!

 On Oct 28, 2010, at 1:31 PM, Evan Leonard wrote:


 the other thing that people keep talking about is how Stripes is (or 
 nearly is) feature complete.  So how about:

 Stripes - simple  complete.


 On Oct 28, 2010, at 2:26 PM, Søren Pedersen wrote:

 What about:
 Stripes - because it's simple


 Den 28/10/2010 22.14 skrev Nikolaos Giannopoulos 
 nikol...@brightminds.org mailto:nikol...@brightminds.org:

 On a more serious note... I agree with Karen.

 In fact... IMO its always better in marketing to differentiate yourself
 (and speak to your audience) with what you do well...

 How about something like:
 Stripes:  The robust and intuitive Java web framework

 --Nikolaos


  2010/10/28 Freddy Daoud xf2...@fastmail.fm 
 mailto:xf2...@fastmail.fm mailto:xf2...@fastmail.fm 
 mailto:xf2...@fastmail.fm

 
   On the source forge page of Stripes I see the text:
  
   Source forge descript...

  mailto:Stripes-users@lists.sourceforge.net 
 mailto:Stripes-users@lists.sourceforge.net

  https://lists.sourceforge.net/lists/listinfo/stripes-users
 
 

 --...


 --
 Nokia and ATT present the 2010 Calling All Innovators-North America 
 contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and 
 Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in 
 marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi 
 Store
 http://p.sf.net/sfu/nokia-dev2dev___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net 
 mailto:Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

 --
 Nokia and ATT present the 2010 Calling All Innovators-North America 
 contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and 
 Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in 
 marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
 http://p.sf.net/sfu/nokia-dev2dev___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

 Joaquin Valdez
 joaquinfval...@gmail.com mailto:joaquinfval...@gmail.com

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Stripes Development and its Future... (long)

2010-10-28 Thread Matthew Altman
I've been away from the Stripes community for a while since my current job
didn't have a place for it. However, just now I find myself in a position of
presenting web frameworks for retrofitting current site as well as future
development for the same company.
I am a big advocate of Stripes since I've experienced first hand the ease
with which development happens.
However, they of course want lists of other possible frameworks and pros and
cons, etc. The other developers on the team who have say in the framework
that is chosen are doing some extensive research.
I keep advocating and pushing Stripes, but they just aren't finding that
much information about it other than the website itself. The few blog posts
that are out there are years old.
So I'm sure we aren't the only ones running into this issue when evaluating
frameworks.
If some of your Stripes experts (I'm really still only a novice truth be
told) would post on various tech site forums and blog about Stripes it would
make a world of difference. Even simple posts about real world examples
where Stripes made things easier for you. Or snippets of sample code on how
to solve common problems.
Yes, a lot of this stuff is on the Stripes website, but people want to see
discussions out in the wild.
Just my thoughts.

-Matthew
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Joel Weight
Along that vein, you could do something like

Stripes: simply rich.

Joel

On Thu, Oct 28, 2010 at 2:45 PM, Nikolaos Giannopoulos 
nikol...@brightminds.org wrote:

 Many take from the word simple alone to imply not feature rich.
 So adding some sort of qualifier is great but I am not sure that
 complete is the word.

 Nothing in software is ever complete unfortunately.
 (Not trying to start a flame war with those that believe Stripes is
 complete...
  I just don't think it is complete... heavily feature rich - sure...
 complete - No - IMHO).

 Just my 2cents...

 --Nikolaos



--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Freddy Daoud
 You are both correct.  Indeed perhaps something like  {#event}  would 
 have been better.  Hindsight is always 20-20.

I realize I'm probably the only one who would like this, but I would
have used {_eventName} because that special request parameter is
already being used for the event name. So, one less magical thing
to learn.

Freddy

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Joaquin Valdez
I have always been partial to the ~

Joaquin


On Oct 28, 2010, at 5:11 PM, Freddy Daoud wrote:

 You are both correct.  Indeed perhaps something like  {#event}  would 
 have been better.  Hindsight is always 20-20.
 
 I realize I'm probably the only one who would like this, but I would
 have used {_eventName} because that special request parameter is
 already being used for the event name. So, one less magical thing
 to learn.
 
 Freddy
 
 --
 Nokia and ATT present the 2010 Calling All Innovators-North America contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
 http://p.sf.net/sfu/nokia-dev2dev
 ___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

Joaquin Valdez
joaquinfval...@gmail.com




--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Odd Clean URL Binding??? (1.5.4 Snapshot)

2010-10-28 Thread Samuel Santos
+1 for {_eventName}

--
Samuel Santos
http://www.samaxes.com/


On Fri, Oct 29, 2010 at 1:14 AM, Joaquin Valdez joaquinfval...@gmail.comwrote:

 I have always been partial to the ~

 Joaquin


 On Oct 28, 2010, at 5:11 PM, Freddy Daoud wrote:

  You are both correct.  Indeed perhaps something like  {#event}  would
  have been better.  Hindsight is always 20-20.
 
  I realize I'm probably the only one who would like this, but I would
  have used {_eventName} because that special request parameter is
  already being used for the event name. So, one less magical thing
  to learn.
 
  Freddy
 
 
 --
  Nokia and ATT present the 2010 Calling All Innovators-North America
 contest
  Create new apps  games for the Nokia N8 for consumers in  U.S. and
 Canada
  $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
 marketing
  Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
  http://p.sf.net/sfu/nokia-dev2dev
  ___
  Stripes-users mailing list
  Stripes-users@lists.sourceforge.net
  https://lists.sourceforge.net/lists/listinfo/stripes-users

 Joaquin Valdez
 joaquinfval...@gmail.com





 --
 Nokia and ATT present the 2010 Calling All Innovators-North America
 contest
 Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
 $10 million total in prizes - $4M cash, 500 devices, nearly $6M in
 marketing
 Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
 http://p.sf.net/sfu/nokia-dev2dev
 ___
 Stripes-users mailing list
 Stripes-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/stripes-users

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Stripes Development and its Future... (long)

2010-10-28 Thread farouk alhassan
Just a quick pointer to help your case,

a quick search on dzone.com for stripes reveals a number of good links and 
articles that may help your popularity case.

Regards

farouk

--- On Thu, 28/10/10, Matthew Altman altman.matt...@gmail.com wrote:

From: Matthew Altman altman.matt...@gmail.com
Subject: Re: [Stripes-users] Stripes Development and its Future... (long)
To: Stripes Users List stripes-users@lists.sourceforge.net
Date: Thursday, 28 October, 2010, 22:33

I've been away from the Stripes community for a while since my current job 
didn't have a place for it. However, just now I find myself in a position of 
presenting web frameworks for retrofitting current site as well as future 
development for the same company.

I am a big advocate of Stripes since I've experienced first hand the ease with 
which development happens.
However, they of course want lists of other possible frameworks and pros and 
cons, etc. The other developers on the team who have say in the framework that 
is chosen are doing some extensive research.

I keep advocating and pushing Stripes, but they just aren't finding that much 
information about it other than the website itself. The few blog posts that are 
out there are years old.
So I'm sure we aren't the only ones running into this issue when evaluating 
frameworks.

If some of your Stripes experts (I'm really still only a novice truth be told) 
would post on various tech site forums and blog about Stripes it would make a 
world of difference. Even simple posts about real world examples where Stripes 
made things easier for you. Or snippets of sample code on how to solve common 
problems.

Yes, a lot of this stuff is on the Stripes website, but people want to see 
discussions out in the wild.
Just my thoughts.

-Matthew



-Inline Attachment Follows-

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
-Inline Attachment Follows-

___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users



  --
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users


Re: [Stripes-users] Source forge description: It's stripey and it doesn't suck

2010-10-28 Thread Søren Pedersen
I keep thinking of the headline for Grails The search is over. At one
point saying look no further and at another pointing to the fact that
people have been for the holy grail for thousands of years.
That's a good one.
It would be cool if we hit something with more than one dimension :)

Den 28/10/2010 23.47 skrev Joel Weight digitalj...@gmail.com:

Along that vein, you could do something like

Stripes: simply rich.

Joel



On Thu, Oct 28, 2010 at 2:45 PM, Nikolaos Giannopoulos 
nikol...@brightminds.org wrote:

 Many ...

--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users
--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev___
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users