Stripes BookStripesOther LinksJust For Fun |
Saturday, January 24. 2009Stripes-QuickstartTrackbacks
Trackback specific URI for this entry
No Trackbacks
Comments
Display comments as
(Linear | Threaded)
Looking forward to using the Stripes-Quickstart :D
Another example of making developing web applications in Java easy ...and Java web development is fun again! ;)
Thanks Tim & Fred,
DJDaveMark
Just tried it out. Pretty cool stuff. All we need now is the full stack with stripernate. Great work
Hi Frederic
Enjoying your book.
But I've just spotted a logic error..
validate aliases P 205
You should check each alias to make sure there are no duplicates.
Otherwise in "add mode" you would be able to enter same alias twice since no data would be committed to database yet.
I'll post a review on Amazon.co,yk when I'm done.
Regards, Jeremy
Section 14.2 of your book. Cross Site Scripting.
I'm surprised that this isn't implemented as an interceptor.
After all wouldn't it have been more prudent to always do this stuff rather than having to remember it each time?(ie escapexml stuff).
Hi Jeremy, thank you for your kind words and for posting your review on Amazon. To answer your question regarding the use of an interceptor for preventing XSS attacks: that is certainly an option, but I prefer to do this in the view layer since it only affects the display of values in an HTML page. If the data is to be exported to a text file, spreadsheet, and so on, the unescaped value must be used. Furthermore, when the user edits a value, that also must be the unescaped value.
Hi Frederic.
Have just posted review on Amazon.co.uk
http://www.amazon.co.uk/gp/product/1934356212/
Good luck with sales of book.
Really enjoyed reading it.
Regards, Jeremy
Your instructions say core.project.path property should be an absolute path, but, in my testing, specifying a relative path worked as well, e.g., '../stripes-project-1'. Perhaps you can remove the absolute path requirement from the instructions?
You are right, Allen. Thanks for pointing that out. I've posted an update.
|
Calendar
QuicksearchCategories |