Re: [web-devel] Kick-off discussion: Yesod 0.9

The scenario I am considering is if you accidentally leave a form field in
the form/view model that you removed from your view and then use techniques
to automatically assign data back to the model. Obviously I know little of
the F# frameworks :)
On Wed, Jun 1, 2011 at 9:14 AM, Justin Greene
Hi Greg,
From what I can tell, the form/view model is roughly the same as building
up an applicative form. If you build a custom form, you have to declare a field both in your form/view model and in your view, which is the kind of insecure duplication we would like to avoid when possible.
I am unclear as to what you mean by "insecure". You do have to specify where you want your field to render, but there is no chance of someone maliciously adding fields to your form, or inserting data into fields that you do not specify.
participants (1)
-
Greg Weber