hello christoph.

i currently see no hard reason against it, and implementing such an 
injector+additional annotation would be easy.

it opens a bit more "attack surface" because potentially unsafe data from 
outside is directly injected in your model (perhaps without you noticing it 
when you use the generic @Inject annotation which iterates over all injectors 
for the first match).

so perhaps it would make sense allowing such an injection only when a specific 
@RequestParameter annotation is used.

stefan


>-----Original Message-----
>From: Christoph Thodte [mailto:christoph.tho...@ht-solutions.de]
>Sent: Friday, October 7, 2016 12:07 PM
>To: users@sling.apache.org
>Subject: Sling Model and Request Parameters
>
>Hello!
>
>My question to discuss: Why doesn't support Sling Models an adapation from
>SlingRequest to inject the request parameters (not the request attributes).
>
>I think form handling will be easier with this adaption.
>
>Christoph

Reply via email to