Use formatting framework within <s:param> and Resolution.addParameter()
-----------------------------------------------------------------------
Key: STS-322
URL: http://mc4j.org/jira/browse/STS-322
Project: Stripes
Issue Type: Improvement
Components: Formatting
Affects Versions: Release 1.5
Reporter: Barry Davies
Assigned To: Tim Fennell
Priority: Minor
Use formatting framework within <s:param> and Resolution.addParameter() so that
the value being generated will naturally fit into the Formatter/TypeConverter
zen of peaceful coexistence with nature. In addition to generally keeping
things consistent within Stripes, this has recently become of particular
interest to me, because I use the Formatter/TypeConverter facility to rehydrate
my entities from Hibernate, and I'd like to munge (or encode, or encrypt, or
whatever) my entity IDs so that people aren't TamperData-tempted into trying to
fiddle with it in an attempt to reverse engineer any of my security logic. If
one isn't mungeing, one simply needs to remember to use a property expression
of "entity.id" when using <s:param> or Resolution.addParameter( "entity",
entity.getId() ), which is harmless enough if a tad suboptimal. But once
someone wants to start mungeing as part of this process, things get messy, and
this mungeing logic starts to bleed into things I'd rather it d
idn't. If Stripes were to extend the use of the formatting facility to these
other areas, I could alter my LayerSupertype for Formatting/TypeConverting
entities to take care of this mungeing almost transparently to the rest of my
application.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mc4j.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
