Ted,
I'm still not yet on board with removing the ! syntax until we have a solid 
replacement. I don't think pointing to wildcards is enough, especially since 
you would have to create a wildcard for every namespace. That is more 
configuration than I'm willing to recommend to our users.

I would, however, be open to introducing the type of action mapping and 
convention-based configuration I have put in to Able, while still also 
supporting struts.xml:

http://svn.opensymphony.com/fisheye/browse/sandbox/able/src/main/java/com/opensymphony/able/webwork/AbleActionMapper.java?r=7

http://svn.opensymphony.com/fisheye/browse/sandbox/able/src/main/java/com/opensymphony/able/webwork/AbleConfiguration.java?r=4

But without something like the above, or with a way to use wildcards for 
multiple namespaces, I cannot readily agree to dropping the ! syntax.

I know that the overriding concern is "security". I have a few thoughts on that:

1) I would suggest reaching out to the big WebWork users (Jive, Atlassian, 
Google, others) to see if this is something that has concerned them in the 
past. My feeling is that it isn't a big concern, because they understand 
anything in an action is "fair game" to URL manipulators and that that has 
always been clearly understood.

2) Assuming we want to make method invocation more obvious, we could require an 
annotation or a convention such as as doXxx, such as RIFE does.
---------------------------------------------------------------------
Posted via Jive Forums
http://forums.opensymphony.com/thread.jspa?threadID=40884&messageID=81481#81481


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to