grails/grails-core — pull request #268 by uurien (2012-09-17 12:48:06+00:00)
Title: RequestDataValueProcessor interface support

The objective of this request is to have an extension point within Grails, that allow the processing of parameters and urls included within a web response in a non intrusive way. Specifically we propose the use the same interface that was created for the integration between HDIV and Spring MVC, that say RequestDataValueProcessor interface.

HDIV is a Java web security framework that has the goal to avoid most common web security risk (OWASP top ten web risks). HDIV needs to process all forms and urls included within a web response in order to guarantee their integrity and confidentiality. Currently there is custom solution to integrate HDIV within grails framework through the creation a custom version of each component (tags, redirect handlers, etc.) that create urls or parameters and using them instead Grails original components.

This approach has a maintainability disadvantage that forces to release a new set of HDIV for every new version of Grails. Also there is the risk that the behavior of Grails components may change in the future (maybe they become private, etc.) and become not compatible with HDIV integration, affecting to HDIV possible users in Grails environments.