Hello,

It seems to us that there is a serious flaw in the struts validation - in
the RequestUtil class, the BeanUtils.populate method is called. In our
testing, this allows an erroneous value to be replaced with a default value
- for example a form class which will set a Short, and the form value
entered is text, this will result in a value of 0. This all happens when
the form bean is populated, before the server side validate() is called, or
anything else can be intercepted. No exception occurs, so no errors can be
generated. I was wondering if there is any idea about using something other
than populate() - or making sure that the BeanUtils Converters do not use
the constructors which make them enter default values....

has anyone else had this problem, it seems to mean struts is only good for
String inputs, otherwise any type conversion is not assured? Am I missing
something, is there a parameter somewhere to tell struts to do typesafe
conversions?

Regards,
Simon


**********************************************************************
Any personal or sensitive information contained in this email and
attachments must be handled in accordance with the Victorian Information
Privacy Act 2000, the Health Records Act 2001 or the Privacy Act 1988
(Commonwealth), as applicable.

This email, including all attachments, is confidential.  If you are not the
intended recipient, you must not disclose, distribute, copy or use the
information contained in this email or attachments.  Any confidentiality or
privilege is not waived or lost because this email has been sent to you in
error.  If you have received it in error, please let us know by reply
email, delete it from your system and destroy any copies.
**********************************************************************




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to