On 10/30/07, Ted Husted <[EMAIL PROTECTED]> wrote: > A better long-term solution might be to create a standard JSP 2.0 > taglib for Struts 2 that follows the same external API as the Struts 1 > EL tags, and didn't use OGNL at all. > > * http://struts.apache.org/1.3.8/struts-el/index.html > > This would mean doing without templates, but I think many people are > reverting to the simple theme anyway. > > I'd really love to do this myself, but I don't know how to fit it in > with everything else. >
I'm actually working on something similar to this. It allows either OGNL or JSP EL in each tag, but not both, which should alleviate the security hole. It's about 1/2 done at this point. And yes, it does not support templates, which are my least favorite Struts 2 feature because they can't be turned off. (*Chris*) --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]