I have switched some of our REST methods to receive objects (via JSON) rather than form params.
What is the suggested pattern to prevent invalid objects being received? I assume that the default constructor is called followed by setters on the object? cheers, David
