[ http://issues.apache.org/jira/browse/BEEHIVE-291?page=history ]
Eddie O'Neil updated BEEHIVE-291:
---------------------------------
Fix Version: V1
> netui-config needs to be able to configure the writability of the pageFlow /
> sharedFlow binding contexts
> --------------------------------------------------------------------------------------------------------
>
> Key: BEEHIVE-291
> URL: http://issues.apache.org/jira/browse/BEEHIVE-291
> Project: Beehive
> Type: Bug
> Components: NetUI
> Versions: V1Beta
> Reporter: Eddie O'Neil
> Assignee: Eddie O'Neil
> Fix For: V1
>
> Currently, the pageFlow and sharedFlow implicit objects are data bindable
> from a browser with:
> {pageFlow.foo} or {sharedFlow.foo}
> This can lead to manipulation of values exposed from the pageFlow /
> sharedFlow to JSPs in ways that weren't intended. While this can be used to
> expose properties on a JPF as if the JPF itself was a form bean, it's often
> the case that a JPF needs to expose read-only data to a JSP that isn't
> web-writable.
> The netui-config file and the expression language need to support
> *preventing* this type of expression-based update by allowing an app
> developer to constrain the list of writable implict objects.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
http://www.atlassian.com/software/jira
