On Fri, Jul 1, 2011 at 7:54 PM, Josh Canfield <[email protected]> wrote:

> Tapestry reads the execution mode from system properties, but loads
> only the modules that have been configured via the servlet context.
>
> For integration tests I'd like to provide a TestOnly module which
> replaces some services. I don't want to put a reference to this module
> in the production web.xml.
>
> I'd like to modify TapestryFilter so that it passes a symbol provider
> with both context and system properties providers.
>
> I haven't seen any conversations around this so I thought I'd float it
> by the group before I check it in.
>
> I thought it might be a security concern, but if I can hack your
> system and change the system properties used to start your server, I
> can probably also explode your war file and replace your web.xml...

I don't see your security concern as a good point here cause if you
hack my system you already have access to my web.xml, different story
about the TestOnly module

Cheers
-- 
Massimo
http://meridio.blogspot.com

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to