I thought I heard Ted say a month ago that Don was doing some
refactoring in XWork that would allow the script language to be
pluggable.
I missed any further comments on the subject though so I don't know
if it was successful or still in the pipeline or what.
I'm happy to know that a complete solution is being planned/developed.
I just say that if the security problem is caused only by bad
programming practice, removing EL evaluation into S2 tld is causing
upgrading problems to many well-written applications.
--
Ing. Andrea Vettori
Consulente per l'Information Technology
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
