[ http://mc4j.org/jira/browse/STS-322?page=all ]
Ben Gunter resolved STS-322.
----------------------------
Fix Version/s: Release 1.5
Resolution: Fixed
Formatting support was added to UrlBuilder, which affects stripes:link,
stripes:url, RedirectResolution, and ForwardResolution (via OnwardResolution)
> Use formatting framework within <s:param> and Resolution.addParameter()
> -----------------------------------------------------------------------
>
> Key: STS-322
> URL: http://mc4j.org/jira/browse/STS-322
> Project: Stripes
> Issue Type: Improvement
> Components: Formatting
> Affects Versions: Release 1.5
> Reporter: Barry Davies
> Assigned To: Tim Fennell
> Priority: Minor
> Fix For: Release 1.5
>
>
> Use formatting framework within <s:param> and Resolution.addParameter() so
> that the value being generated will naturally fit into the
> Formatter/TypeConverter zen of peaceful coexistence with nature. In addition
> to generally keeping things consistent within Stripes, this has recently
> become of particular interest to me, because I use the
> Formatter/TypeConverter facility to rehydrate my entities from Hibernate, and
> I'd like to munge (or encode, or encrypt, or whatever) my entity IDs so that
> people aren't TamperData-tempted into trying to fiddle with it in an attempt
> to reverse engineer any of my security logic. If one isn't mungeing, one
> simply needs to remember to use a property expression of "entity.id" when
> using <s:param> or Resolution.addParameter( "entity", entity.getId() ), which
> is harmless enough if a tad suboptimal. But once someone wants to start
> mungeing as part of this process, things get messy, and this mungeing logic
> starts to bleed into things I'd rather it
didn't. If Stripes were to extend the use of the formatting facility to
these other areas, I could alter my LayerSupertype for
Formatting/TypeConverting entities to take care of this mungeing almost
transparently to the rest of my application.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mc4j.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
