SWF / MVC write-up

Rod Widdowson rdw at steadingsoftware.com
Thu Sep 5 11:03:33 EDT 2013


> There's also the ESAPI encoder object, which is definitely needed inside 
> Velocity templates, and is not Serializable. Velocity has no built-in HTML
> escaping support, so writing out error messages isn't safe without having
> the encoder available.

That feels a lot like a show stopping argument against requiring full blown
serializability.

FWIW, I'm like Scott in that I am not a native Java Speaker and I tend to
listen when people who I trust take string positions on this...

R



More information about the dev mailing list