@Target(value={PARAMETER,METHOD}) @Retention(value=RUNTIME) @Documented public @interface ModelAttribute
@RequestMapping
methods.
WARNING: Data binding can lead to security issues by exposing parts of the object graph that are not meant to be accessed or modified by external clients. Therefore the design and use of data binding should be considered carefully with regard to security. For more details, please refer to the dedicated sections on data binding for Spring Web MVC and Spring WebFlux in the reference manual.
@ModelAttribute
can be used to expose command objects to a web view,
using specific attribute names, by annotating corresponding parameters of an
@RequestMapping
method.
@ModelAttribute
can also be used to expose reference data to a web
view by annotating accessor methods in a controller class with
@RequestMapping
methods. Such accessor
methods are allowed to have any arguments that
@RequestMapping
methods support, returning
the model attribute value to expose.
Note however that reference data and all other model content are
not available to web views when request processing results in an
Exception
since the exception could be raised at any time
making the content of the model unreliable. For this reason
@ExceptionHandler
methods do not provide
access to a Model
argument.
ControllerAdvice
Modifier and Type | Optional Element and Description |
---|---|
boolean |
binding
Allows data binding to be disabled directly on an
@ModelAttribute
method parameter or on the attribute returned from an @ModelAttribute
method, both of which would prevent data binding for that attribute. |
String |
name
The name of the model attribute to bind to.
|
String |
value
Alias for
name() . |
@AliasFor(value="value") public abstract String name
The default model attribute name is inferred from the declared attribute type (i.e. the method parameter type or method return type), based on the non-qualified class name: e.g. "orderAddress" for class "mypackage.OrderAddress", or "orderAddressList" for "List<mypackage.OrderAddress>".
public abstract boolean binding
@ModelAttribute
method parameter or on the attribute returned from an @ModelAttribute
method, both of which would prevent data binding for that attribute.
By default this is set to true
in which case data binding applies.
Set this to false
to disable data binding.