You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tapestry.apache.org by Jamie Orchard-Hays <ja...@dang.com> on 2004/09/01 00:00:49 UTC

Re: question about StringValidator

 I think that's why it's left out. You can just set max length in the html
and be done with it. Why process back on the server when it's built into
html?


> ----- Original Message ----- 
> From: "Jeff Emminger" <ma...@jeffemminger.com>
> To: <ta...@jakarta.apache.org>
> Sent: Tuesday, August 31, 2004 5:46 PM
> Subject: question about StringValidator
>
>
> > hi all,
> >
> > i notice StringValidator has no method for setting the max length of the
> > string.  is it more common/better to just use the html input's maxlength
> > attribute, or should i subclass StringValidator?
> >
> > thanks,
> > jeff
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tapestry-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tapestry-user-help@jakarta.apache.org
> >
>


---------------------------------------------------------------------
To unsubscribe, e-mail: tapestry-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tapestry-user-help@jakarta.apache.org


Re: question about StringValidator

Posted by Erik Hatcher <er...@ehatchersolutions.com>.
On Aug 31, 2004, at 6:00 PM, Jamie Orchard-Hays wrote:
>  I think that's why it's left out. You can just set max length in the 
> html
> and be done with it. Why process back on the server when it's built 
> into
> html?

I view server-side validation, though, as a mechanism to also prevent 
malicious or inadvertent postings that come from non-browser clients.  
For example, lots of folks decide to hack, workaround, or "integrate" 
by posting forms through things like HttpClient, JMeter, and other 
clients.

No matter what validation exists on the client, it is wise to be sure 
to do data integrity validations on the server.

	Erik

>
>
>> ----- Original Message -----
>> From: "Jeff Emminger" <ma...@jeffemminger.com>
>> To: <ta...@jakarta.apache.org>
>> Sent: Tuesday, August 31, 2004 5:46 PM
>> Subject: question about StringValidator
>>
>>
>>> hi all,
>>>
>>> i notice StringValidator has no method for setting the max length of 
>>> the
>>> string.  is it more common/better to just use the html input's 
>>> maxlength
>>> attribute, or should i subclass StringValidator?
>>>
>>> thanks,
>>> jeff
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: tapestry-user-unsubscribe@jakarta.apache.org
>>> For additional commands, e-mail: 
>>> tapestry-user-help@jakarta.apache.org
>>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tapestry-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tapestry-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tapestry-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tapestry-user-help@jakarta.apache.org