on 5/18/01 1:04 AM, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote:

> I doubt too many installations of Velocity are set up to disallow user
> code - it's not too much you can do. It'll be secure - probably because
> nobody will care to use such a thing :-) And if you allow any user code -
> all the #foreach prevention of DOS goes away.

The key point here is that installations that need the level of security
will be setup that way without having to completely disable the API.

-jon

-- 
If you come from a Perl or PHP background, JSP is a way to take
your pain to new levels. --Anonymous
<http://jakarta.apache.org/velocity/ymtd/ymtd.html>

Reply via email to