Re: hacker-proofing Struts-based exposed websites

[Matt Bathje]

Yes, you would have to do it for every form in the application. To me 
that isn't an issue though because for most (I'd say 95%+) of the forms 
in my application, I already have a validator entry set up - I would 
just need to add the invalidCharacter validation and its variables to 
each form.

If you did want to do this with validator, you could setup 
global-variables for the delimiter and invalidCharacters, but it doesn't 
help too much. (If you don't get global-variables in validator let me 
know and I'll explain off list)

Is that better or worse than having to have a form class that extends 
SafeValidatorForm? I think we know where I stand, but I can see the case 
for extending ValidatorForm to put the validation there. Still don't see 
the case for the required/maxlength validators that you add though.

I think a global-validation type scheme is kind of a cool idea - if you 
look into validator and decide you want to extend it to include a 
global-validation, be sure to contribute back to the commons validator 
people :)

Matt

Seetamraju, Uday wrote:
You may have a point there about me needing to take a better look at the current 
Validator.
But, from what you write below, do you want me to do the following for --every-- form 
in my application?
Is there a 'global-validation' available in the latest validator?
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]