Toby Hede wrote:

> Genius, I love you guys!
> 
> So in my Login form I now have an attribute called 'success' that passes 
> the URI into the Login Action, which then automatically redirects the 
> View for me!


Actually, this works even with just the redirect action. Simply set 
"redirect.action" as result, and use a parameter "url=someurl" in the 
request.


>> You can also return any string from your action's execute that the
>> dispatcher will use as a key to fetch a URI from the request object. 
>> If the
>> dispatcher does not find an object from the request with this key it will
>> then try and find a view from your view map.


When was this introduced? I must've missed it...argh..

What does this give that the above solution doesn't give? It seems as 
though this is a serious security issue since a user can tweak the URI 
to get to data which should usually not be possible. Not good.

/Rickard

-- 
Rickard �berg
Chief Architect, TheServerSide.com
The Middleware Company



_______________________________________________
Webwork-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webwork-user

Reply via email to