struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lukasz Lenart (JIRA)" <j...@apache.org>
Subject [jira] [Created] (WW-4963) Implement new Aware interfaces that are using withXxxx pattern instead of setters
Date Wed, 19 Sep 2018 07:08:00 GMT
Lukasz Lenart created WW-4963:
---------------------------------

             Summary: Implement new Aware interfaces that are using withXxxx pattern instead
of setters
                 Key: WW-4963
                 URL: https://issues.apache.org/jira/browse/WW-4963
             Project: Struts 2
          Issue Type: Improvement
          Components: Core Actions
            Reporter: Lukasz Lenart
             Fix For: 2.6


In matter of security I wonder if we should stop using setters in internal API. Like in {{SessionAware}}
interface we use {{setSession()}} and each actions must implement this method. Then we have
a logic to avoid mapping incoming values to {{setSession()}} to permit injecting values into
Session.

Instead of {{setSession()}} we can use {{withSession()}} or {{applySession()}} - the same
can be applied to any *Aware interface.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message