Hi Tony,

> Thanks for the tips. The main security concern that I have is for an end
> user who enters an arbitrary file to the #parse directive. I'm not sure if
> this concern is substantiated, but I'll assume it is until proven otherwise.

Will's article offers some solutions for this.  :)

> I have an old JSP application lying around that I thought I'd convert to
> Velocity just to get up to speed. However, while JSP has tag libraries that
> allow execution of Java, Velocity seems to lack this ability (and rightly so
> according to its design intention). Consider a JSP taglib that encodes a URL
> using java.net.URLEncoder.encode: <t:url encode="/blah blah"/> What is the
> equivalent scenario for Velocity? Do I create a macro? Does such a macro
> already exist?

You are looking for tools.  By putting POJOs in the Context, all the
public methods will be available in the templates.
    http://jakarta.apache.org/velocity/tools/index.html

Best regards,
-- Shinobu

--
Shinobu Kawai <[EMAIL PROTECTED]>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to