SWF / MVC write-up

[Cantor, Scott]

On 9/5/13 11:03 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:

>> There's also the ESAPI encoder object, which is definitely needed
>>inside 
>> Velocity templates, and is not Serializable. Velocity has no built-in
>>HTML
>> escaping support, so writing out error messages isn't safe without
>>having
>> the encoder available.
>
>That feels a lot like a show stopping argument against requiring full
>blown
>serializability.

It's not; we could inject it into a servlet request attribute somehow, and
there's an option to populate the template context with any servlet
attributes using the MVC ViewResolver. It's just not as simple as a bit of
XML to populate it into view-scope.

-- Scott