Return-Path: Delivered-To: apmail-cocoon-dev-archive@www.apache.org Received: (qmail 41036 invoked from network); 24 Nov 2004 19:47:16 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 24 Nov 2004 19:47:16 -0000 Received: (qmail 50443 invoked by uid 500); 24 Nov 2004 19:47:14 -0000 Delivered-To: apmail-cocoon-dev-archive@cocoon.apache.org Received: (qmail 50118 invoked by uid 500); 24 Nov 2004 19:47:13 -0000 Mailing-List: contact dev-help@cocoon.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: dev@cocoon.apache.org Delivered-To: mailing list dev@cocoon.apache.org Delivered-To: moderator for dev@cocoon.apache.org Received: (qmail 49187 invoked by uid 99); 24 Nov 2004 19:46:29 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (hermes.apache.org: local policy) Mime-Version: 1.0 (Apple Message framework v619) In-Reply-To: References: <41A223DF.3090006@apache.org> <41A26BD1.1030501@apache.org> <41A2F14D.6000907@apache.org> <0A1DF444-3D3F-11D9-B36C-000A95AF004E@apache.org> <41A473A9.2000109@s-und-n.de> Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <81BC9F4C-3E51-11D9-B185-000393B3DE96@mac.com> Content-Transfer-Encoding: 7bit From: Glen Ezkovich Subject: Re: Client side validation Date: Wed, 24 Nov 2004 13:46:17 -0600 To: dev@cocoon.apache.org X-Mailer: Apple Mail (2.619) X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N On Nov 24, 2004, at 6:37 AM, oceatoon wrote: > Luca Garulli wrote: > >> I think that client-side validation is a very common use case. I'm >> writing a XSL to apply in the pipeline just after the cform >> generation. >> >> If anyone want client-side validation (always in adding to the >> server-side validation and never in place of) just insert a >> transformer specifyng the XSL and some optional parameters. > But then don't you have double validation ? > talking about performance client side validation removes some load > (execution time) off the server, which is allways appreciated Unfortunately, there are evil users who can circumvent client side validation and some users whose browsers do not support javascript or choose to disable it, so you should always have server side validation. > > Tibor > > > > > Glen Ezkovich HardBop Consulting glen at hard-bop.com http://www.hard-bop.com A Proverb for Paranoids: "If they can get you asking the wrong questions, they don't have to worry about answers." - Thomas Pynchon Gravity's Rainbow