Gabriel Wong wrote:
>
> Interesting point.  But my counter argument against automatic URL rewriting:
>     -You may have a link to another server which means you can't encode the
> session
>     -You would still need a tag to tell the JSP Parser to encode the URL which
> is the  same as manually wrapping encodeURL()
>
> Possible solution (argument for):
>     -Perhaps have a directive that turns off/on automatic URL encoding.  If ON
> ALL links are automatically encoded
>

You can implement something intelligent...

some examples:
HREF="http://www.socialnet.com" => no encoding because starts with http:
HREF="mailto:<%= myBean.getAddress() %>" => no encoding because starts
with mailto:
HREF="<%= myBean.getUrl() %> => no encoding because no way to know... =>
getUrl must encode it if it needs to.
HREF="/jsp/next.jsp" => encoding (we stay in the same session)
HREF="/jsp/<%= myBean.getNextPage() %>" => encoding (we stay in the same
session)

This is exactly what I have done in my implementation of 0.92... and it
works great...

Yan

--

http://eowyn.fr.eu.org/~yan/ | [EMAIL PROTECTED]

SocialNet: Where people connect... http://www.socialnet.com

===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff JSP-INTEREST".  For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".

Reply via email to