Security and Filters

["VEDRE, RANAPRATAP REDDY" <VE...@engr.sc.edu>]

 I have started to do a Web Application in struts and the first decision i
need to make is How to Implement Security for my application?

 searched the struts mail archive and looks like extending the ActionServlet
process is a good solution though some suggest modifying the ActionServlet
and recompiling struts.

 I was wondering if any of you have successfully used Filters supported by
the Servlet 2.3 API for implementing security.
  Any success using Turbine for security?  

 -Thanks.

 

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

RE: Security and Filters

[Leo Grove <le...@ssl.com>]

Unfortunately not. They were designed so that you could add an extra layer
of validation on the server-side without having to change your existing
HTML. So suppose you've been relying on javascript all this time for a
sign-up form. You can now surround those html tags with <ezVerify> tags and
migrate the validation onto the server-side (as well as keeping preliminary
validation on the client side if you continue to use the Javascript).


-----Original Message-----
From: Peter Georgiou [mailto:petertalker@btinternet.com]
Sent: Monday, November 12, 2001 12:15 PM
To: Struts Users Mailing List; leo@ssl.com
Subject: Re: Security and Filters


Hi

I've just read the exVerify user guide.  It specifies that <ezVerify> tags
should enclose <html> tags.  Do these tags still work if they enclose
<struts> tags?

Thanks

Peter


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: Security and Filters

[Peter Georgiou <pe...@btinternet.com>]

Hi

I've just read the exVerify user guide.  It specifies that <ezVerify> tags
should enclose <html> tags.  Do these tags still work if they enclose
<struts> tags?

Thanks

Peter


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

RE: Security and Filters

[Leo Grove <le...@ssl.com>]

I've just released ezVerify at www.ezverify.com. Perhaps the filtering
capabilities can help you there.

In any case, I am looking for beta testers to try it out and give feedback.
It's free, and you can download it at:

http://www.ezverify.com/Download.jsp

Here is a brief description of what it does-

"The ezVerify Suite is a set of tags that allow for server-side validation
to occur as opposed to just using client-side JavaScript or complicated
custom programming. The primary goals of this product are to provide 1) a
rich set of server-side validation features and 2) be compatible with HTML
3.2+ so that authors need only add ezVerify tags to their existing HTML web
forms as opposed to rewriting the entire page."

check it out...

-----Original Message-----
From: VEDRE, RANAPRATAP REDDY [mailto:VEDRE@engr.sc.edu]
Sent: Sunday, November 11, 2001 11:42 PM
To: 'struts-user@jakarta.apache.org'
Subject: Security and Filters



 I have started to do a Web Application in struts and the first decision i
need to make is How to Implement Security for my application?

 searched the struts mail archive and looks like extending the ActionServlet
process is a good solution though some suggest modifying the ActionServlet
and recompiling struts.

 I was wondering if any of you have successfully used Filters supported by
the Servlet 2.3 API for implementing security.
  Any success using Turbine for security?

 -Thanks.



--
To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
For additional commands, e-mail:
<ma...@jakarta.apache.org>


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>