--- On Wed, 12/17/08, Robert Graf-Waczenski wrote: > What is the reasoning behind restricting the value= > attribute to non-runtime values only?
Security issues: since JSP EL/rtexprs are evaluated first, if they evaluate to a valid OGNL expression it's possible to end up with evil values that might not be intended. > > How would one create a url with multiple url parameters? <s:url ...> <s:param.../> <s:param.../> </s:url> Dave --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@struts.apache.org
