Rene,

with your post you spoke from my heart - +1 & thanks.

> So let's say we would provide prominent notice on application startup, level 
> INFO or even WARN. In case of uncommented JSON activated, say "WARNING: be 
> sure to have read http://.../General+JSON+Security+Considerations. Maybe you 
> want to limit to POST requests only". In case of commented-mode, say "You are 
> running the JSON plugin in safe mode, which might impose incompatibilities to 
> consuming services. Be sure to read blablabla..."
> This is meant regardless to what the default setting would be, which is a 
> seperate discussion then - as for me, I'd tend to standards rather than safe 
> mode.

As a User, I love such messages.
In addition to that I would like to see another content type in the
response then "application/json" if it is in commented mode, like
"text/ext-json".

If both features were in, I would not mind anymore about the default
setting because it is not so confusing anymore and I can use it
straightforward without asking the mailinglist.

Cheers,
Christian



>
> Could this be a way to go?
>
>>> you should write a page about it
>>
>> I will not claim that the documentation of this "feature" exists or is 
>> clear, but that is a separate question than that of how it should behave.  
>> Struts is an open source project.  If you think there should be a page that 
>> doesn't yet exist, please write it and contribute it.
>>
>>> Is the configuration "POST" or "GET" by default?
>>
>> The configuration of your struts.xml which specifies the interceptors and 
>> result types that your actions will use does not by default include json.  
>> If you want to add in those interceptors or results, you should learn how 
>> they work, and configure them appropriately.
>>
>> -Dale
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
>> For additional commands, e-mail: dev-h...@struts.apache.org
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>



-- 
http://www.grobmeier.de

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org

Reply via email to