On 10/30/07, Ted Husted <[EMAIL PROTECTED]> wrote:
> A better long-term solution might be to create a standard JSP 2.0
> taglib for Struts 2 that follows the same external API as the Struts 1
> EL tags, and didn't use OGNL at all.
>
>  * http://struts.apache.org/1.3.8/struts-el/index.html
>
> This would mean doing without templates, but I think many people are
> reverting to the simple theme anyway.
>
> I'd really love to do this myself, but I don't know how to fit it in
> with everything else.
>

I'm actually working on something similar to this.  It allows either
OGNL or JSP EL in each tag, but not both, which should alleviate the
security hole. It's about 1/2 done at this point.  And yes, it does
not support templates, which are my least favorite Struts 2 feature
because they can't be turned off.
  (*Chris*)

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to