English 中文(简体)
Can a freemarker viewpage be user editable and secured?
原标题:

If I let anyone modify a freemarker viewpage, can I somehow make it hack free?

I know I read somewhere that I can make disable scriplets, but that was for .jsp pages so not sure if it will work with freemarker.

I basically want a way where I can set the attributes that will be available on the page, and let web designers go into the page and edit it all they want (all the while making it secure).

i.e. I don t want people to be able to access any of objects in the request pipeline, or output my connection string to the page etc.

问题回答

Request and other objects are exposed to the FreeMarker template by Spring s FreeMarkerView, when FreeMarker is used as a Spring MVC view technology.

To have a full control over the data being exposed to the templates, you can use FreeMarker directly, as described in the FreeMarker docs. However, you can still use Spring s support for FreeMarker configuration (FreeMarkerConfigurationFactoryBean).





相关问题
Spring Properties File

Hi have this j2ee web application developed using spring framework. I have a problem with rendering mnessages in nihongo characters from the properties file. I tried converting the file to ascii using ...

Logging a global ID in multiple components

I have a system which contains multiple applications connected together using JMS and Spring Integration. Messages get sent along a chain of applications. [App A] -> [App B] -> [App C] We set a ...

Java Library Size

If I m given two Java Libraries in Jar format, 1 having no bells and whistles, and the other having lots of them that will mostly go unused.... my question is: How will the larger, mostly unused ...

How to get the Array Class for a given Class in Java?

I have a Class variable that holds a certain type and I need to get a variable that holds the corresponding array class. The best I could come up with is this: Class arrayOfFooClass = java.lang....

SQLite , Derby vs file system

I m working on a Java desktop application that reads and writes from/to different files. I think a better solution would be to replace the file system by a SQLite database. How hard is it to migrate ...

热门标签