You can subscribe to this list here.
2002 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(5) |
Nov
(68) |
Dec
(77) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2003 |
Jan
(75) |
Feb
(84) |
Mar
(89) |
Apr
(96) |
May
(52) |
Jun
(73) |
Jul
(99) |
Aug
(46) |
Sep
(40) |
Oct
(46) |
Nov
(45) |
Dec
(25) |
2004 |
Jan
(13) |
Feb
(74) |
Mar
(40) |
Apr
(18) |
May
(31) |
Jun
(1) |
Jul
(16) |
Aug
(1) |
Sep
(21) |
Oct
(19) |
Nov
(10) |
Dec
(16) |
2005 |
Jan
(4) |
Feb
(12) |
Mar
(46) |
Apr
(33) |
May
(64) |
Jun
(1) |
Jul
(60) |
Aug
(31) |
Sep
(26) |
Oct
(24) |
Nov
(37) |
Dec
(10) |
2006 |
Jan
(3) |
Feb
(31) |
Mar
(122) |
Apr
(22) |
May
(4) |
Jun
|
Jul
|
Aug
(2) |
Sep
(4) |
Oct
(8) |
Nov
(3) |
Dec
|
2007 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
(3) |
Oct
|
Nov
|
Dec
|
2008 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(2) |
Dec
(8) |
From: Marc v. de G. <mvd...@xs...> - 2002-11-25 08:21:52
|
Hi, I hope this is the place to ask the following question. If not, just ignore it. First of all: I'm new to WebMacro (using it for a week now) and the more I get to know it, the more I like it. Great job! What I'm trying to do is: At one side there are the WebMacro classes for processing the Web requests and responses, on the other the Jetgen classes (http://www.jetools.com) for access to the database. I've got both up and running. Somehow I want to make the conversion of the data from the jetgen classes into the WebMacro classes easy. I was thinking about subclassing the WebContext class to add methods to do just that. I already have a subclass of WMServlet to do some basic stuff with form data. The problem is: there are so many final classes, that I'm wondering if it is possible to do this. Especially the newInstance method. Can somebody give me tips on how to do this so I can use that WebContext subclass in the WMServlet subclass I've already created? Or is there some other approach somebody can recommend for this problem? Kind regards, Marc |
From: Steve V. <ste...@ea...> - 2002-11-25 07:41:40
|
Hi there, I am using Tomcat4.1 and have placed the WebMacro.properties file under my c:\Tomcat 4.1\webapps\moj directory (the webroot for the application). The contents are as follows: TemplatePath="c:\Tomcat 4.1\webapps\moj" However, when I try load a page onto the browser, I get an error about webmacro not being able to find the requested template. Am I missing something here? Is the space in the directory name causing any problems? Forward or Backward slash issues? Thanks for any help or suggestion. |
From: Eric B. R. <eb...@tc...> - 2002-11-25 06:42:43
|
On Monday, November 25, 2002, at 01:14 AM, Keats Kirsch wrote: > +1 for the change. > > It has always bothered me that an exception in an #if is evaluated as=20= > false. > > It seems like you could still choose to not throw in the DfltEEH if = you > wanted to preserve backwards compatability, but I'd vote against it. Ditto, because changing DEEH would change it for normal variable=20 references also. eric > > Keats > > Eric B. Ridge wrote: > > On Friday, November 22, 2002, at 07:22 AM, Endre St=F8lsvik wrote: > > > >> Shouldn't the cranky-dude kick on _everything_?? > > > > > > I've spent some time looking at this, and I'm changing it, but the > > "fix" has an interesting side effect when using the > > DefaultEvaluationExceptionHandler. > > > > Currently, #if (b/c of Expression.java) treats all expressions that > > throw as "false". When using CrankyEEH, this isn't good because = you > > miss the exceptions (as Endre reported). The solution is to make > > Expression.java (and IfDirective) honor whatever EEH says to do. > > > > However, with Endre's examples, WM is throwing > > PropertyException.NoSuchMethodException. This is an exception that > > DefaultEEH also wants to throw. So, with this fix, CrankyEEH and > > DefaultEEH both will throw when when you #if ($foo.noSuchMethod()), > > whereas previously, because the exception was being treated as=20 > "false", > > neither would throw. > > > > I think this is a GoodThing, but it's important to note because=20 > people > > that rely on this behavior with #if/DefaultEEH (default=20 > configuration > > of WM) will start getting exceptions where previously they did not.=20= > If > > nothing else, at least now NoSuchMethodException is being handled > > consistently. > > > > If anyone thinks this is bad, please yell. > > > > eric > > > |
From: Keats K. <kea...@na...> - 2002-11-25 06:14:23
|
+1 for the change. It has always bothered me that an exception in an #if is evaluated as false. It seems like you could still choose to not throw in the DfltEEH if you wanted to preserve backwards compatability, but I'd vote against it. Keats Eric B. Ridge wrote: > On Friday, November 22, 2002, at 07:22 AM, Endre Stølsvik wrote: > >> Shouldn't the cranky-dude kick on _everything_?? > > > I've spent some time looking at this, and I'm changing it, but the > "fix" has an interesting side effect when using the > DefaultEvaluationExceptionHandler. > > Currently, #if (b/c of Expression.java) treats all expressions that > throw as "false". When using CrankyEEH, this isn't good because you > miss the exceptions (as Endre reported). The solution is to make > Expression.java (and IfDirective) honor whatever EEH says to do. > > However, with Endre's examples, WM is throwing > PropertyException.NoSuchMethodException. This is an exception that > DefaultEEH also wants to throw. So, with this fix, CrankyEEH and > DefaultEEH both will throw when when you #if ($foo.noSuchMethod()), > whereas previously, because the exception was being treated as "false", > neither would throw. > > I think this is a GoodThing, but it's important to note because people > that rely on this behavior with #if/DefaultEEH (default configuration > of WM) will start getting exceptions where previously they did not. If > nothing else, at least now NoSuchMethodException is being handled > consistently. > > If anyone thinks this is bad, please yell. > > eric |
From: Eric B. R. <eb...@tc...> - 2002-11-25 05:28:52
|
On Friday, November 22, 2002, at 07:22 AM, Endre St=F8lsvik wrote: > Shouldn't the cranky-dude kick on _everything_?? I've spent some time looking at this, and I'm changing it, but the =20 "fix" has an interesting side effect when using the =20 DefaultEvaluationExceptionHandler. Currently, #if (b/c of Expression.java) treats all expressions that =20 throw as "false". When using CrankyEEH, this isn't good because you =20 miss the exceptions (as Endre reported). The solution is to make =20 Expression.java (and IfDirective) honor whatever EEH says to do. However, with Endre's examples, WM is throwing =20 PropertyException.NoSuchMethodException. This is an exception that =20 DefaultEEH also wants to throw. So, with this fix, CrankyEEH and =20 DefaultEEH both will throw when when you #if ($foo.noSuchMethod()), =20 whereas previously, because the exception was being treated as "false", =20= neither would throw. I think this is a GoodThing, but it's important to note because people =20= that rely on this behavior with #if/DefaultEEH (default configuration =20= of WM) will start getting exceptions where previously they did not. If =20= nothing else, at least now NoSuchMethodException is being handled =20 consistently. If anyone thinks this is bad, please yell. eric > > =46rom logfile: > > 12:41:58 PM broker DEBUG Property ExceptionHandler: > org.webmacro.engine.CrankyEvaluationExceptionHandler > > > But these bugs (in my template) does not write _anything_ in the =20 > output, > only makes my #if never give any sane results (until I checked the > logfile!) : > > > 12:54:09 PM engine WARNING Error evaluating $exceptions.size() > org.webmacro.PropertyException$NoSuchMethodException: No public method > size() on variable $exceptions of class =20 > org.webmacro.engine.UndefinedMacro > at =20 > /data/devel/endre/new/server/webapp/WEB-INF/classes/com/corelets/=20 > monitor/views/RenderExceptions.wm:2.2 > at =20 > = org.webmacro.engine.PropertyOperator.getProperty(PropertyOperatorCache.=20= > java:625) > at =20 > = org.webmacro.engine.PropertyOperatorCache.getProperty(PropertyOperatorC=20= > ache.java:142) > at org.webmacro.Context.internalGet(Context.java:389) > at org.webmacro.Context.getProperty(Context.java:441) > at =20 > = org.webmacro.engine.PropertyVariable.getValue(PropertyVariable.java:49) > at org.webmacro.engine.Variable.evaluate(Variable.java:148) > at =20 > = org.webmacro.engine.Expression$BinaryOperation.evaluate(Expression.java=20= > :93) > at =20 > org.webmacro.directive.IfDirective.write(IfDirective.java:191) > at org.webmacro.engine.Block.write(Block.java:135) > at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) > at =20 > = org.webmacro.directive.IncludeDirective.write(IncludeDirective.java:347=20= > ) > at org.webmacro.engine.Block.write(Block.java:166) > at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) > at org.webmacro.servlet.WMServlet.execute(WMServlet.java:524) > at = org.webmacro.servlet.WMServlet.doRequest(WMServlet.java:262) > at org.webmacro.servlet.WMServlet.doGet(WMServlet.java:195) > at = javax.servlet.http.HttpServlet.service(HttpServlet.java:740) > > > AND > > > 12:54:09 PM engine WARNING Error evaluating $task.LastRunStarted > org.webmacro.PropertyException$NoSuchPropertyException: No public =20 > property > LastRunStarted on variable $task of class > com.corelets.config.properties.TaskProperties at =20 > /data/devel/endre/new/server/webapp/WEB-INF/classes/com/corelets/=20 > monitor/views/Task.wm:55.15 > at =20 > = org.webmacro.engine.PropertyOperator.getProperty(PropertyOperatorCache.=20= > java:707) > at =20 > = org.webmacro.engine.PropertyOperatorCache.getProperty(PropertyOperatorC=20= > ache.java:142) > at org.webmacro.Context.internalGet(Context.java:389) > at org.webmacro.Context.getProperty(Context.java:441) > at =20 > = org.webmacro.engine.PropertyVariable.getValue(PropertyVariable.java:49) > at org.webmacro.engine.Variable.evaluate(Variable.java:148) > at =20 > = org.webmacro.engine.Expression$BinaryOperation.evaluate(Expression.java=20= > :93) > at =20 > org.webmacro.directive.IfDirective.write(IfDirective.java:191) > at org.webmacro.engine.Block.write(Block.java:166) > at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) > at org.webmacro.servlet.WMServlet.execute(WMServlet.java:524) > at = org.webmacro.servlet.WMServlet.doRequest(WMServlet.java:262) > at org.webmacro.servlet.WMServlet.doGet(WMServlet.java:195) > at = javax.servlet.http.HttpServlet.service(HttpServlet.java:740) > > > I was just looking for messed output, since I thought that Cranky-dude > would kick hugely on everything. But there wasn't _any_ signals = there.. > > > --=20 > Mvh, > Endre St=F8lsvik M[+47 93054050] F[+47 51625182] > Developer @ CoreTrek AS - http://www.coretrek.com/ > CoreTrek corporate portal / EIP - http://www.corelets.com/ > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Webmacro-user mailing list > Web...@li... > https://lists.sourceforge.net/lists/listinfo/webmacro-user |
From: Eric B. R. <eb...@tc...> - 2002-11-22 15:32:41
|
On Friday, November 22, 2002, at 07:22 AM, Endre St=F8lsvik wrote: > Shouldn't the cranky-dude kick on _everything_?? He should definitely complain about your two errors below. I'll look =20= into it, and try to get it into the next beta release (which might =20 happen tonight). eric > > =46rom logfile: > > 12:41:58 PM broker DEBUG Property ExceptionHandler: > org.webmacro.engine.CrankyEvaluationExceptionHandler > > > But these bugs (in my template) does not write _anything_ in the =20 > output, > only makes my #if never give any sane results (until I checked the > logfile!) : > > > 12:54:09 PM engine WARNING Error evaluating $exceptions.size() > org.webmacro.PropertyException$NoSuchMethodException: No public method > size() on variable $exceptions of class =20 > org.webmacro.engine.UndefinedMacro > at =20 > /data/devel/endre/new/server/webapp/WEB-INF/classes/com/corelets/=20 > monitor/views/RenderExceptions.wm:2.2 > at =20 > = org.webmacro.engine.PropertyOperator.getProperty(PropertyOperatorCache.=20= > java:625) > at =20 > = org.webmacro.engine.PropertyOperatorCache.getProperty(PropertyOperatorC=20= > ache.java:142) > at org.webmacro.Context.internalGet(Context.java:389) > at org.webmacro.Context.getProperty(Context.java:441) > at =20 > = org.webmacro.engine.PropertyVariable.getValue(PropertyVariable.java:49) > at org.webmacro.engine.Variable.evaluate(Variable.java:148) > at =20 > = org.webmacro.engine.Expression$BinaryOperation.evaluate(Expression.java=20= > :93) > at =20 > org.webmacro.directive.IfDirective.write(IfDirective.java:191) > at org.webmacro.engine.Block.write(Block.java:135) > at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) > at =20 > = org.webmacro.directive.IncludeDirective.write(IncludeDirective.java:347=20= > ) > at org.webmacro.engine.Block.write(Block.java:166) > at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) > at org.webmacro.servlet.WMServlet.execute(WMServlet.java:524) > at = org.webmacro.servlet.WMServlet.doRequest(WMServlet.java:262) > at org.webmacro.servlet.WMServlet.doGet(WMServlet.java:195) > at = javax.servlet.http.HttpServlet.service(HttpServlet.java:740) > > > AND > > > 12:54:09 PM engine WARNING Error evaluating $task.LastRunStarted > org.webmacro.PropertyException$NoSuchPropertyException: No public =20 > property > LastRunStarted on variable $task of class > com.corelets.config.properties.TaskProperties at =20 > /data/devel/endre/new/server/webapp/WEB-INF/classes/com/corelets/=20 > monitor/views/Task.wm:55.15 > at =20 > = org.webmacro.engine.PropertyOperator.getProperty(PropertyOperatorCache.=20= > java:707) > at =20 > = org.webmacro.engine.PropertyOperatorCache.getProperty(PropertyOperatorC=20= > ache.java:142) > at org.webmacro.Context.internalGet(Context.java:389) > at org.webmacro.Context.getProperty(Context.java:441) > at =20 > = org.webmacro.engine.PropertyVariable.getValue(PropertyVariable.java:49) > at org.webmacro.engine.Variable.evaluate(Variable.java:148) > at =20 > = org.webmacro.engine.Expression$BinaryOperation.evaluate(Expression.java=20= > :93) > at =20 > org.webmacro.directive.IfDirective.write(IfDirective.java:191) > at org.webmacro.engine.Block.write(Block.java:166) > at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) > at org.webmacro.servlet.WMServlet.execute(WMServlet.java:524) > at = org.webmacro.servlet.WMServlet.doRequest(WMServlet.java:262) > at org.webmacro.servlet.WMServlet.doGet(WMServlet.java:195) > at = javax.servlet.http.HttpServlet.service(HttpServlet.java:740) > > > I was just looking for messed output, since I thought that Cranky-dude > would kick hugely on everything. But there wasn't _any_ signals = there.. > > > --=20 > Mvh, > Endre St=F8lsvik M[+47 93054050] F[+47 51625182] > Developer @ CoreTrek AS - http://www.coretrek.com/ > CoreTrek corporate portal / EIP - http://www.corelets.com/ > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Webmacro-user mailing list > Web...@li... > https://lists.sourceforge.net/lists/listinfo/webmacro-user |
From: <web...@st...> - 2002-11-22 12:22:15
|
Shouldn't the cranky-dude kick on _everything_?? From logfile: 12:41:58 PM broker DEBUG Property ExceptionHandler: org.webmacro.engine.CrankyEvaluationExceptionHandler But these bugs (in my template) does not write _anything_ in the output, only makes my #if never give any sane results (until I checked the logfile!) : 12:54:09 PM engine WARNING Error evaluating $exceptions.size() org.webmacro.PropertyException$NoSuchMethodException: No public method size() on variable $exceptions of class org.webmacro.engine.UndefinedMacro at /data/devel/endre/new/server/webapp/WEB-INF/classes/com/corelets/monitor/views/RenderExceptions.wm:2.2 at org.webmacro.engine.PropertyOperator.getProperty(PropertyOperatorCache.java:625) at org.webmacro.engine.PropertyOperatorCache.getProperty(PropertyOperatorCache.java:142) at org.webmacro.Context.internalGet(Context.java:389) at org.webmacro.Context.getProperty(Context.java:441) at org.webmacro.engine.PropertyVariable.getValue(PropertyVariable.java:49) at org.webmacro.engine.Variable.evaluate(Variable.java:148) at org.webmacro.engine.Expression$BinaryOperation.evaluate(Expression.java:93) at org.webmacro.directive.IfDirective.write(IfDirective.java:191) at org.webmacro.engine.Block.write(Block.java:135) at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) at org.webmacro.directive.IncludeDirective.write(IncludeDirective.java:347) at org.webmacro.engine.Block.write(Block.java:166) at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) at org.webmacro.servlet.WMServlet.execute(WMServlet.java:524) at org.webmacro.servlet.WMServlet.doRequest(WMServlet.java:262) at org.webmacro.servlet.WMServlet.doGet(WMServlet.java:195) at javax.servlet.http.HttpServlet.service(HttpServlet.java:740) AND 12:54:09 PM engine WARNING Error evaluating $task.LastRunStarted org.webmacro.PropertyException$NoSuchPropertyException: No public property LastRunStarted on variable $task of class com.corelets.config.properties.TaskProperties at /data/devel/endre/new/server/webapp/WEB-INF/classes/com/corelets/monitor/views/Task.wm:55.15 at org.webmacro.engine.PropertyOperator.getProperty(PropertyOperatorCache.java:707) at org.webmacro.engine.PropertyOperatorCache.getProperty(PropertyOperatorCache.java:142) at org.webmacro.Context.internalGet(Context.java:389) at org.webmacro.Context.getProperty(Context.java:441) at org.webmacro.engine.PropertyVariable.getValue(PropertyVariable.java:49) at org.webmacro.engine.Variable.evaluate(Variable.java:148) at org.webmacro.engine.Expression$BinaryOperation.evaluate(Expression.java:93) at org.webmacro.directive.IfDirective.write(IfDirective.java:191) at org.webmacro.engine.Block.write(Block.java:166) at org.webmacro.engine.WMTemplate.write(WMTemplate.java:255) at org.webmacro.servlet.WMServlet.execute(WMServlet.java:524) at org.webmacro.servlet.WMServlet.doRequest(WMServlet.java:262) at org.webmacro.servlet.WMServlet.doGet(WMServlet.java:195) at javax.servlet.http.HttpServlet.service(HttpServlet.java:740) I was just looking for messed output, since I thought that Cranky-dude would kick hugely on everything. But there wasn't _any_ signals there.. -- Mvh, Endre Stølsvik M[+47 93054050] F[+47 51625182] Developer @ CoreTrek AS - http://www.coretrek.com/ CoreTrek corporate portal / EIP - http://www.corelets.com/ |
From: Harmeet B. <ha...@ko...> - 2002-11-20 04:55:11
|
From: Lane Sharman=20 Anytime you give someone the ability to write script, java, etc with = server-side evaluation, you open up some big security issues no matter = what the restrictions, limitations, and definitions. [Harmeet] Agreed. but if one can tighten things up sufficiently, it may work out = ok. In the end security has to be weighed against cost of security. = Trying to find sufficient security without high cost. From: Lane Sharman=20 In my view, as an ISP, I would be very cautious about running a = container supporting 2 or more distinct and independently written = servlet applications. Mostly, inadvertent side-effects but some = malicious stuff too. Uploading an script to run compounds the security = problem. Better to have their own dedicated container. Better still to = have their own host. [Harmeet] Again agreed, but attempt is to provide some form of db access to = individual users and small organization. The number of potential users = per box could be ~ 1000. The hosting software is Java. Allowing CGI/Perl = out of process would be worse. It may be difficult to manage, high cost, = and difficult to secure( need to limit accesss to file system). It may = also not work well on Windows(unfortunatly needed). Machine/process per = container per user is too costly.=20 I was thinking of providing a subset of webmacro facilities for simple, = limited template scripting. A db connection would be available via = context for the template. This would allow a user to create simple db = apps like address book, bug tracking, faq etc.=20 What I need to know is=20 - What is the right web macro subset to expose - Are there any notes/documentation on web macro and web application = security. Esp. in an environment where anyone can access and create = dynamic but simple web application. Any information, experience, notes would be highly appreciated. thanks, Harmeet ----- Original Message -----=20 From: Lane Sharman=20 To: Harmeet Bedi=20 Cc: webmacro-user=20 Sent: Monday, November 18, 2002 11:18 PM Subject: Re: [WebMacro-user] questions on macros directive Harmeet, Anytime you give someone the ability to write script, java, etc with = server-side evaluation, you open up some big security issues no matter = what the restrictions, limitations, and definitions. In my view, as an ISP, I would be very cautious about running a = container supporting 2 or more distinct and independently written = servlet applications. Mostly, inadvertent side-effects but some = malicious stuff too. Uploading an script to run compounds the security = problem. Better to have their own dedicated container. Better still to = have their own host. -lane Harmeet Bedi wrote: Will it be possible to write recursive macros ? If the macros can be evaluated in such a way that they terminate = at compile time, yes. =20 Would it be possible to have some example of safe but recursive macro ? I feel that macro directive call graph and recursive calls could be = abused by a malicious person. Is this likely ? Is it possible to provide a way = to limit macros to make them safer ? Can wm templates be used as part of a hosting solution ? Can one provide ability to add wm templates but somehow restrict the person uploading wm templates from bringing down the container. With 1.0, I was thinking = that restricting available Java packages and disallowing the include = directive could do the trick. Is this true ? Does it make sense ? Is this in line with web macro use case ? Appreciate your help. I have been using webmacro a little bit for a year = but don't know enough about it. One thing would help (at least)me a lot would be some documentation on = web application security with web macro. thanks, Harmeet |
From: Lane S. <la...@sa...> - 2002-11-19 07:09:44
|
Harmeet, Anytime you give someone the ability to write script, java, etc with server-side evaluation, you open up some big security issues no matter what the restrictions, limitations, and definitions. In my view, as an ISP, I would be very cautious about running a container supporting 2 or more distinct and independently written servlet applications. Mostly, inadvertent side-effects but some malicious stuff too. Uploading an script to run compounds the security problem. Better to have their own dedicated container. Better still to have their own host. -lane Harmeet Bedi wrote: >>>Will it be possible to write recursive macros ? >>> >>> >>If the macros can be evaluated in such a way that they terminate at >>compile time, yes. >> >> > >Would it be possible to have some example of safe but recursive macro ? > > >I feel that macro directive call graph and recursive calls could be abused >by a malicious person. Is this likely ? Is it possible to provide a way to >limit macros to make them safer ? > >Can wm templates be used as part of a hosting solution ? Can one provide >ability to add wm templates but somehow restrict the person uploading wm >templates from bringing down the container. With 1.0, I was thinking that >restricting available Java packages and disallowing the include directive >could do the trick. Is this true ? Does it make sense ? >Is this in line with web macro use case ? > >Appreciate your help. I have been using webmacro a little bit for a year but >don't know enough about it. >One thing would help (at least)me a lot would be some documentation on web >application security with web macro. > >thanks, >Harmeet > > > >------------------------------------------------------- >This sf.net email is sponsored by: To learn the basics of securing >your web site with SSL, click here to get a FREE TRIAL of a Thawte >Server Certificate: http://www.gothawte.com/rd524.html >_______________________________________________ >Webmacro-user mailing list >Web...@li... >https://lists.sourceforge.net/lists/listinfo/webmacro-user > > > |
From: Brian G. <br...@qu...> - 2002-11-18 20:46:38
|
> While the programmer in me appreciates this design, the WM enthusiast > doesn't. Wasn't WM meant to avoid coding within the template itself, > particularly because of its strong value introspection? Or put it > another way: "Let your artists design..." (sounds familiar, huh?) > > How is the macro idea different from mixing layout and code? Kind regards, The #macro directive can enable a sort of style-sheet functionality, allowing a designer to specify repetitive blocks of template easily. It was intended to aid the presentation of the template, not encourage or enable computation in the template. Also, lets not forget that WM is NOT HTML-specific, and in some case, there is no artist. I use WM all the time to generate e-mail messages, source code, etc. |
From: Christian A. <chr...@wi...> - 2002-11-18 20:33:53
|
Hi fellow WM developers, I've just had a quick look at the macro directive overview as of 1.1, as you can find it on http://www.webmacro.org/MacroDirective While the programmer in me appreciates this design, the WM enthusiast doesn't. Wasn't WM meant to avoid coding within the template itself, particularly because of its strong value introspection? Or put it another way: "Let your artists design..." (sounds familiar, huh?) How is the macro idea different from mixing layout and code? Kind regards, - Christian Aust |
From: Harmeet B. <ha...@ko...> - 2002-11-18 05:16:02
|
> > Will it be possible to write recursive macros ? > If the macros can be evaluated in such a way that they terminate at > compile time, yes. Would it be possible to have some example of safe but recursive macro ? I feel that macro directive call graph and recursive calls could be abused by a malicious person. Is this likely ? Is it possible to provide a way to limit macros to make them safer ? Can wm templates be used as part of a hosting solution ? Can one provide ability to add wm templates but somehow restrict the person uploading wm templates from bringing down the container. With 1.0, I was thinking that restricting available Java packages and disallowing the include directive could do the trick. Is this true ? Does it make sense ? Is this in line with web macro use case ? Appreciate your help. I have been using webmacro a little bit for a year but don't know enough about it. One thing would help (at least)me a lot would be some documentation on web application security with web macro. thanks, Harmeet |
From: Brian G. <br...@qu...> - 2002-11-18 01:28:12
|
> Can macros ever call other macros ? Yes they can > Will it be possible to write recursive macros ? If the macros can be evaluated in such a way that they terminate at compile time, yes. |
From: Harmeet B. <ha...@ko...> - 2002-11-18 01:04:49
|
Can macros ever call other macros ? Will it be possible to write recursive macros ? One nice thing about webmacro is that it is really simple and does't allow an end user to mess up the container due to coding errors. Would this safety aspect be reduced in any way in 1.1 ? thanks, Harmeet |
From: Lane S. <la...@sa...> - 2002-11-17 16:38:49
|
WM users, the #macro facility is a terrific and working addition to webmacro in release 1.1. Many, many thanks to the tireless mr. goetz. take a bow. To vitalize wm a bit, I have added a resource folder, macros/, to 1.1b2, due out in a few days. This folder will contains concrete and standard ways for formatting common, everyday schmoo which must be dynamically merged with live values. For example, macros/ecomm/paypal.wmm contains macros to support generating paypal buttons for transactions :). If you have some standard wm script which rightfully belongs in a macro (not in an include file with globals), please forward them to me today! I will fill out 1.1 with contributions which stand up to our standards. Please include a test case webmacro script as well as a proposal for the macro declaration. Send it to me offline, please. btw: did you know that Jason Hunter devoted much of a chapter in his servlets book to WebMacro? Lane |
From: Eric B. R. <eb...@tc...> - 2002-11-16 20:10:40
|
On Saturday, November 16, 2002, at 02:25 AM, Nikhil G. Daddikar wrote: > Has the syntax changed in 1.1? Earlier #default $x to 3 used to work, > now I see "to 3" on my webpages. Yes, it has changed to: #default $x = 3 Sorry for not including this in the release notes. I think the reasoning behind it was to make #default similar to #set. eric |
From: Nikhil G. D. <ng...@ce...> - 2002-11-16 07:25:22
|
Has the syntax changed in 1.1? Earlier #default $x to 3 used to work, now I see "to 3" on my webpages. ------------------------------------------------------------------------ -------- Nikhil G. Daddikar Celoxis Technologies ng...@ce... |
From: <kea...@na...> - 2002-11-15 16:24:06
|
Paul, This question has come up from time to time over the years. Probably the documentation is a bit unclear. (Maybe we should add this to the FAQ page.) WebMacro follows the JavaBean naming conventions for figuring out how to evaluate a property in a WM Script. However, it doesn't follow the naming convention in the WMScript language. The design goals of Java and WMScript are very different. Since Java is object oriented and seeks to promote encapsulation and data hiding, property access is generally through setters and getters (accessors and mutators). WMScript hides this complexity -- a property is just a property, you don't need to know if it is a public member variable, an accessor, or a key in a Map. This style mismatch may be a bit confusing, but it does have some advantages. For one thing, unconforming properties can still be accessed. I.e., getprop() could be accessed as $var.prop. But mostly I think its just a aesthetic thing: Justin and the other progenitors of WebMacro thought that $var.Prop looked better than $var.prop. Anyway this was a very early design decision that has been in every version of WebMacro (and Velocity) that I am aware of, and I don't see any compelling reason to revisit it now. Keats > -----Original Message----- > From: web...@li... > [mailto:web...@li...]On Behalf Of Paul G. > Weiss > Sent: Friday, November 15, 2002 10:30 AM > To: web...@li... > Subject: [WebMacro-user] Case problem with Bean specification > > > Please correct me if I'm wrong, but I was under the > impression that the > Bean specification held that a property named "foo" would have > accessor methods: > > public Type getFoo() > public void setFoo(Type t) > > i.e. the letter case of the first letter of the property name reverses > itself when defining the name of the property. > > This is the pattern in all of the example code provided by Sun, as > well as the Bean Serializer in the Apache SOAP package. > > Yet, webmacro (at least 1.0.1, I haven't tried 1.1b1) seems to have > it the other way. In other words if I have a variable $var of my bean > type, webmacro will not expand $var.foo when I have the methods > indicated above, but it will expand $var.Foo. > > This seems like a bug to me, although difficult to fix in light of the > existing templates that must be out there. Perhaps webmacro > ought to try both variants, i.e. if it see $var.pname it should look > for getPname() as well as getpname() ( and I would argue that it > should be in that order). > > Comments? > -Paul Weiss > > > > ------------------------------------------------------- > This sf.net email is sponsored by: To learn the basics of securing > your web site with SSL, click here to get a FREE TRIAL of a Thawte > Server Certificate: http://www.gothawte.com/rd524.html > _______________________________________________ > Webmacro-user mailing list > Web...@li... > https://lists.sourceforge.net/lists/listinfo/webmacro-user > |
From: Lane S. <la...@sa...> - 2002-11-15 16:23:15
|
Hi Paul, Thanks for the observation. In general, the thinking is this: $BeanRef. + "get" + "Method" maps to the bean signature and respects the bean signature protocol so that $BeanRef.Foo is well distinguished from the member reference: Object foo. Your proposal would become ambiguous and impose some additional overhead which we are very careful about avoiding. public class MyBean { public Hashtable foo; public String getFoo() { return foo.get("bar").toString(); } } The introspection engine design likes that it can provide $BeanRef.foo and $BeanRef.Foo as distinct references efficiently and that under your proposal, the selection would get the member when you probably wanted the method. <newQuestion> When writing a web app with lots of templates. How do you like to get templates parsed once? In other words, if you have a template file, global.wmt, and, it changes rarely, do you include it at the top of every template, or do you use another technique? Please advise on this and any other "BestPractices" which I am compiling for release 1.1 </> -lane Paul G. Weiss wrote: >Please correct me if I'm wrong, but I was under the impression that the >Bean specification held that a property named "foo" would have >accessor methods: > > public Type getFoo() > public void setFoo(Type t) > >i.e. the letter case of the first letter of the property name reverses >itself when defining the name of the property. > >This is the pattern in all of the example code provided by Sun, as >well as the Bean Serializer in the Apache SOAP package. > >Yet, webmacro (at least 1.0.1, I haven't tried 1.1b1) seems to have >it the other way. In other words if I have a variable $var of my bean >type, webmacro will not expand $var.foo when I have the methods >indicated above, but it will expand $var.Foo. > >This seems like a bug to me, although difficult to fix in light of the >existing templates that must be out there. Perhaps webmacro >ought to try both variants, i.e. if it see $var.pname it should look >for getPname() as well as getpname() ( and I would argue that it >should be in that order). > >Comments? >-Paul Weiss > > > >------------------------------------------------------- >This sf.net email is sponsored by: To learn the basics of securing >your web site with SSL, click here to get a FREE TRIAL of a Thawte >Server Certificate: http://www.gothawte.com/rd524.html >_______________________________________________ >Webmacro-user mailing list >Web...@li... >https://lists.sourceforge.net/lists/listinfo/webmacro-user > > > |
From: Paul G. W. <pa...@we...> - 2002-11-15 15:29:14
|
Please correct me if I'm wrong, but I was under the impression that the Bean specification held that a property named "foo" would have accessor methods: public Type getFoo() public void setFoo(Type t) i.e. the letter case of the first letter of the property name reverses itself when defining the name of the property. This is the pattern in all of the example code provided by Sun, as well as the Bean Serializer in the Apache SOAP package. Yet, webmacro (at least 1.0.1, I haven't tried 1.1b1) seems to have it the other way. In other words if I have a variable $var of my bean type, webmacro will not expand $var.foo when I have the methods indicated above, but it will expand $var.Foo. This seems like a bug to me, although difficult to fix in light of the existing templates that must be out there. Perhaps webmacro ought to try both variants, i.e. if it see $var.pname it should look for getPname() as well as getpname() ( and I would argue that it should be in that order). Comments? -Paul Weiss |
From: Eric B. R. <eb...@tc...> - 2002-11-13 16:14:40
|
On Wednesday, November 13, 2002, at 08:54 AM, Tim Pizey wrote: > Hi, > Tried to update the wiki but couldn't remember my username/password. > There was no mail-me-my-details (or did I miss it?). Sadly, no, there is no "mail-me-my-details" feature. Nor can I retrieve your password manually... they're stored as MD5 hashes. And on top of all that, the admin interfaces for this version of Wiki are not complete yet. :( So, I suppose your only option is to re-register. I realize it's not a great option, but it's all we've got right now. If you like, I can manually delete your old user account. eric > > cheers > Tim Pizey > > > > ------------------------------------------------------- > This sf.net email is sponsored by: Are you worried about > your web server security? Click here for a FREE Thawte > Apache SSL Guide and answer your Apache SSL security > needs: http://www.gothawte.com/rd523.html > _______________________________________________ > Webmacro-user mailing list > Web...@li... > https://lists.sourceforge.net/lists/listinfo/webmacro-user |
From: Tim P. <ti...@pa...> - 2002-11-13 13:55:55
|
Hi,=20 Tried to update the wiki but couldn't remember my username/password. There was no mail-me-my-details (or did I miss it?). cheers Tim Pizey |
From: Matthew I. <mat...@se...> - 2002-11-11 21:02:18
|
Thanks. I was able to convice the guy that handles it to use the beta version, since our release won't be for several more months. On Mon, 2002-11-11 at 15:40, Brian Goetz wrote: > > > Do you know approximately when 1.1 will be released? > > > I like lots of the new stuff (#macro and #const), but > > > am reluctant to code using a beta for a production system. > > > > Hopefully VerySoon (tm). Maybe around the middle of December. One > > thing that will help us get 1.1 out the door faster is to have people > > like you help us test. If you've got a development environment, I'd > > recommend popping 1.1b1 in, and giving it a go. #macro and #const have > > been in CVS, and in heavy use by some of us, for many many months now. > > I think you'll be surprised at the stability. :) > > Most of the new stuff is entirely self-contained; even if there are > bugs in the new stuff, they won't break the old stuff. And we've been > using the new stuff in production for six months now, it works great. > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Webmacro-user mailing list > Web...@li... > https://lists.sourceforge.net/lists/listinfo/webmacro-user -- Matt Inger (mat...@se...) SEDONA Corporation 455 S. Gulph Road, Suite 300 King of Prussia, PA 19406 (484) 679-2213 "Self-respect - the secure feeling that no one, as yet, is suspicious." -H.L. Mencken |
From: Brian G. <br...@qu...> - 2002-11-11 20:40:11
|
> > Do you know approximately when 1.1 will be released? > > I like lots of the new stuff (#macro and #const), but > > am reluctant to code using a beta for a production system. > > Hopefully VerySoon (tm). Maybe around the middle of December. One > thing that will help us get 1.1 out the door faster is to have people > like you help us test. If you've got a development environment, I'd > recommend popping 1.1b1 in, and giving it a go. #macro and #const have > been in CVS, and in heavy use by some of us, for many many months now. > I think you'll be surprised at the stability. :) Most of the new stuff is entirely self-contained; even if there are bugs in the new stuff, they won't break the old stuff. And we've been using the new stuff in production for six months now, it works great. |
From: Eric B. R. <eb...@tc...> - 2002-11-11 19:29:01
|
Sorry for the spam. Am trying to get MailMan@SourceForge to set the Reply-To: header to go to this list. eric |