> I haven't seen any obstacles to a change like that. It would be nice if we
> could reuse a param binding implementation with type-conversion from
> somewhere else rather reinvent another.
Yes, definitely. Any suggestions? What is the status of Commons beanutils?
musachy
--
"Hey you! Would you
Musachy Barroso wrote:
Should we continue to use OGNL for parameter binding? This creates so
many possible security holes, in exchange for pretty much nothing,
when parameter names should be simple (indexing + the old A.B.C
notation).
Are there any uses cases where the full OGNL power is needed,
I wrote my own for the JCatapult MVC and it does most of the parameter
setting stuff that OGNL does and a few other things like handling
generics correctly and completely. It also has a pretty solid type
conversion API. Took about 3 days to write, test and complete. Feel
free to grab the co
