<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="ltr">
<div></div>
<div style="">
<div>
<div dir="ltr"><span id="ms-outlook-ios-cursor"></span>Just curious, doesn’t JSP/JSF processing already use a “string template” type paradigm using a ${} type syntax. Would any changes here be usable either or or there?</div>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Given recent log4j security issues, is there any possible risk that expansion could introduce some exploitable logic? Does any sort of constraint or mechanism need to protect against that or am I I er thinking it?</div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><br>
</div>
<div id="ms-outlook-mobile-signature">
<div><br>
</div>
Get <a href="https://aka.ms/o0ukef" style="">Outlook for iOS</a></div>
<div id="mail-editor-reference-message-container" class="ms-outlook-mobile-reference-message">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif"><b>From:</b> jdk-dev <jdk-dev-retn@openjdk.org> on behalf of Attila Kelemen <attila.kelemen85@gmail.com><br>
<b>Sent:</b> Wednesday, September 21, 2022 6:20 PM<br>
<b>To:</b> Brian Goetz <brian.goetz@oracle.com><br>
<b>Cc:</b> amber-dev@openjdk.org <amber-dev@openjdk.org>; jdk-dev@openjdk.org <jdk-dev@openjdk.org><br>
<b>Subject:</b> Re: New candidate JEP: 430: String Templates (Preview)
<div> </div>
</font></div>
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Thanks for the responses. See some of my clarifications below.<br>
<br>
> ><br>
> > 1. Might be a personal preference, but I find the<br>
> > `TemplateProcessorExpression . Template` syntax bizarre.<br>
><br>
> We knew that at least one out of the 10M Java developers would loudly<br>
> proclaim "I hate the syntax", so congratulations, it's you :) New<br>
> syntaxes are risky; people are used to "${foo}" in other languages, and<br>
> this is new and different, and sometimes different is scary. But, it<br>
> wasn't picked out of a hat; a good deal of thought has gone into this,<br>
> and so while it may seem weird now, give it a year and I suspect it will<br>
> not seem so odd. (In any case, amber-dev isn't the forum for syntax<br>
> discussions, so let's leave this here.)<br>
<br>
Just to clear the misunderstanding: I was not commenting on the "\{foo}",<br>
I consider that a good thing (better than "${foo}" for sure, and "${foo}"<br>
would not even be a compatible change). I was talking about the:<br>
`STR."bla ${myVar} bla"`. As opposed to just calling the respective methods.<br>
</div>
</span></font></div>
</div>
</div>
</body>
</html>