On Tue, 04 Feb 2014 13:35:01 -0200, Lance Java <lance.j...@googlemail.com>
wrote:
Not to mention that JavaScriptSupport.addScript() is deprecated.
The same question applies to JavaScriptSupport.require(...)
I don't think so. addScript() adds arbitrary JavaScript, so that may be a
problem if a remote attacker creates some way of calling it.
JavaScriptSupport.require() doesn't add arbitrary JavaScript: it just adds
calls to the JS function require().
--
Thiago H. de Paula Figueiredo
Tapestry, Java and Hibernate consultant and developer
http://machina.com.br
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org
