[jsr-314-open] [C036-ElInResources] Vote favors DefaultToOptOut

[Ted Goddard]

On 2009-10-02, at 2:23 PM, Ed Burns wrote:

> OPTION ELEvaluatedInCSSOnly
>
> With this option, we modify Resource.getInputStream() to state that EL
> evaluation in CSS files is enabled by default.  We will state that  
> care
> must be taken by the user to ensure that the EL expression always
> evaluates to the same thing across multiple requests.  We will state
> that the user may decorate the ResourceHandler to get more  
> flexibility.
>
> ACTION: Please vote +1 or -1 on OPTION ELEvaluatedInCSSOnly

+1

Confining this evaluation to CSS would appear to lower the risk.
I would like to see the explanation for why relative paths do not
work for classpath resources.  Also, I'm not convinced that the
overhead of parsing all CSS on the server is insignificant; has
it been profiled?  We really cannot afford to reduce the performance
of JSF at all.  Additionally, ResourceHandler decoration sounds like
a convenient extension point, so that should allow this strategy
to be applied at any desired granularity.

Ted.