tapestry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Massimo Lusetti <mluse...@gmail.com>
Subject Re: TapestryFilter - Use System properties to load extra modules.
Date Sat, 02 Jul 2011 08:21:28 GMT
On Fri, Jul 1, 2011 at 7:54 PM, Josh Canfield <joshcanfield@gmail.com> wrote:

> Tapestry reads the execution mode from system properties, but loads
> only the modules that have been configured via the servlet context.
>
> For integration tests I'd like to provide a TestOnly module which
> replaces some services. I don't want to put a reference to this module
> in the production web.xml.
>
> I'd like to modify TapestryFilter so that it passes a symbol provider
> with both context and system properties providers.
>
> I haven't seen any conversations around this so I thought I'd float it
> by the group before I check it in.
>
> I thought it might be a security concern, but if I can hack your
> system and change the system properties used to start your server, I
> can probably also explode your war file and replace your web.xml...

I don't see your security concern as a good point here cause if you
hack my system you already have access to my web.xml, different story
about the TestOnly module

Cheers
-- 
Massimo
http://meridio.blogspot.com

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


Mime
View raw message