You may have a point there about me needing to take a better look at the current Validator.
But, from what you write below, do you want me to do the following for --every-- form in my application? Is there a 'global-validation' available in the latest validator? -----Original Message----- From: Matt Bathje [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 03, 2004 3:48 PM To: Struts Users Mailing List Subject: Re: hacker-proofing Struts-based exposed websites [snip] <form name="formymcgee"> <field property="field1" depends="invalidCharacter"> ......... <var> <var-name>invalidCharacters</var-name> <var-value>\u0000,\u003E,\u003C,|</var-value> </var> </field> -------------------------------------------------------- The information contained in this message is intended only for the recipient, and may be a confidential attorney-client communication or may otherwise be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, please be aware that any dissemination or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the message and deleting it from your computer. Thank you, Standard & Poor's -------------------------------------------------------- --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
