Prevention of Denial of service attacks

We have identified an issue with the system that we are developing where a user can send large amounts of data to an action and cause the system to deny other requests to get in. We tried to get apache to limit the request size, but it will not limit the request size for requests that are

Validator Efficiency

I noticed that the validator (pre 1.1) makes several calls to Collection.sort() which are very expensive, and are creating a lot of objects. Has this been fixed in the 1.1 release? dave -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL

RE: Jakarta Regexp Package Issue

We have also seen several errors in the regexp package on our current project. We have had to remove several of our regular expression validations since they would freeze up and never recover. Although regexp is 'lighter', it doesn't seem to be reliable enough. I would love to see ORO used

BUG: Null strings getting converted to 'null' was Websphere and 'null' strings

I know that a few other people have been confused by this bug, so I hope this clears things up. The bug is just a small quirk in the Option Tag code. It seems that StringBuffer works differently on the different JDKs. Here is an example: StringBuffer sb = new StringBuffer(); String x = null;