Rene, with your post you spoke from my heart - +1 & thanks.
> So let's say we would provide prominent notice on application startup, level > INFO or even WARN. In case of uncommented JSON activated, say "WARNING: be > sure to have read http://.../General+JSON+Security+Considerations. Maybe you > want to limit to POST requests only". In case of commented-mode, say "You are > running the JSON plugin in safe mode, which might impose incompatibilities to > consuming services. Be sure to read blablabla..." > This is meant regardless to what the default setting would be, which is a > seperate discussion then - as for me, I'd tend to standards rather than safe > mode. As a User, I love such messages. In addition to that I would like to see another content type in the response then "application/json" if it is in commented mode, like "text/ext-json". If both features were in, I would not mind anymore about the default setting because it is not so confusing anymore and I can use it straightforward without asking the mailinglist. Cheers, Christian > > Could this be a way to go? > >>> you should write a page about it >> >> I will not claim that the documentation of this "feature" exists or is >> clear, but that is a separate question than that of how it should behave. >> Struts is an open source project. If you think there should be a page that >> doesn't yet exist, please write it and contribute it. >> >>> Is the configuration "POST" or "GET" by default? >> >> The configuration of your struts.xml which specifies the interceptors and >> result types that your actions will use does not by default include json. >> If you want to add in those interceptors or results, you should learn how >> they work, and configure them appropriately. >> >> -Dale >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org >> For additional commands, e-mail: dev-h...@struts.apache.org >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org > For additional commands, e-mail: dev-h...@struts.apache.org > > -- http://www.grobmeier.de --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org