On 8/24/05, Bernd Bohmann <[EMAIL PROTECTED]> wrote:
> One question:
> 
> why the value attribute of x:outputText doesn't accept rtexpressions?
> 

It's not just this attribute ... the restriction is pretty much
universal across all attributes on all component tags.  There are two
reasons for this:

* If rtexpressions were allowed, there would be cases where
  the RT expression could return a JSF value binding expression,
  which would then be invoked ... and there are potential security
  issues with this (pretty much like how webapps can be subject
  to cross site scripting attacks if they allow arbitrary code to be
  emitted).

* The fact that you can use a value binding expression on nearly
  every attribute makes using rt expressions redundant ... you can
  do anything you need with a value binding anyway.

In JSF 1.2 / JSP 2.1, the concepts are getting unified ... but in the
mean time (when the JSP container doesn't know what a value binding
expression is) this was the decision made at the JSF spec level.

> 
> Bernd
>

Craig

Reply via email to