SWF / MVC write-up
Rod Widdowson
rdw at steadingsoftware.com
Thu Sep 5 11:03:33 EDT 2013
> There's also the ESAPI encoder object, which is definitely needed inside
> Velocity templates, and is not Serializable. Velocity has no built-in HTML
> escaping support, so writing out error messages isn't safe without having
> the encoder available.
That feels a lot like a show stopping argument against requiring full blown
serializability.
FWIW, I'm like Scott in that I am not a native Java Speaker and I tend to
listen when people who I trust take string positions on this...
R
More information about the dev
mailing list