Class WebDataBinder
- All Implemented Interfaces:
PropertyEditorRegistry
,TypeConverter
- Direct Known Subclasses:
ServletRequestDataBinder
,WebExchangeDataBinder
,WebRequestDataBinder
DataBinder
for data binding from web request parameters
to JavaBean objects. Designed for web environments, but not dependent on
the Servlet API; serves as base class for more specific DataBinder variants,
such as ServletRequestDataBinder
.
WARNING: Data binding can lead to security issues by exposing parts of the object graph that are not meant to be accessed or modified by external clients. Therefore, the design and use of data binding should be considered carefully with regard to security. For more details, please refer to the dedicated sections on data binding for Spring Web MVC and Spring WebFlux in the reference manual.
Includes support for field markers which address a common problem with HTML checkboxes and select options: detecting that a field was part of the form, but did not generate a request parameter because it was empty. A field marker allows to detect that state and reset the corresponding bean property accordingly. Default values, for parameters that are otherwise not present, can specify a value for the field other than empty.
- Since:
- 1.2
- Author:
- Juergen Hoeller, Scott Andrews, Brian Clozel
- See Also:
-
Nested Class Summary
Nested classes/interfaces inherited from class org.springframework.validation.DataBinder
DataBinder.NameResolver, DataBinder.ValueResolver
-
Field Summary
Modifier and TypeFieldDescriptionstatic final String
Default prefix that field default parameters start with, followed by the field name: e.g.static final String
Default prefix that field marker parameters start with, followed by the field name: e.g.Fields inherited from class org.springframework.validation.DataBinder
DEFAULT_AUTO_GROW_COLLECTION_LIMIT, DEFAULT_OBJECT_NAME, logger
-
Constructor Summary
ConstructorDescriptionWebDataBinder
(Object target) Create a new WebDataBinder instance, with default object name.WebDataBinder
(Object target, String objectName) Create a new WebDataBinder instance. -
Method Summary
Modifier and TypeMethodDescriptionprotected void
Check for property values with names that end on"[]"
.protected void
bindMultipart
(Map<String, List<MultipartFile>> multipartFiles, MutablePropertyValues mpvs) Bind all multipart files contained in the given request, if any (in case of a multipart request).protected void
Check the given property values for field defaults, i.e.protected void
Check the given property values for field markers, i.e.protected void
doBind
(MutablePropertyValues mpvs) This implementation performs a field default and marker check before delegating to the superclass binding process.getEmptyValue
(Class<?> fieldType) Determine an empty value for the specified field.protected Object
getEmptyValue
(String field, Class<?> fieldType) Determine an empty value for the specified field.Return the prefix for parameters that mark default fields.Return the prefix for parameters that mark potentially empty fields.boolean
Return whether to bind empty MultipartFile parameters.protected Object
resolvePrefixValue
(String name, Class<?> type, BiFunction<String, Class<?>, Object> resolver) Check if a value can be resolved ifgetFieldDefaultPrefix()
orgetFieldMarkerPrefix()
is prepended.void
setBindEmptyMultipartFiles
(boolean bindEmptyMultipartFiles) Set whether to bind empty MultipartFile parameters.void
setFieldDefaultPrefix
(String fieldDefaultPrefix) Specify a prefix that can be used for parameters that indicate default value fields, having "prefix + field" as name.void
setFieldMarkerPrefix
(String fieldMarkerPrefix) Specify a prefix that can be used for parameters that mark potentially empty fields, having "prefix + field" as name.Methods inherited from class org.springframework.validation.DataBinder
addCustomFormatter, addCustomFormatter, addCustomFormatter, addValidators, applyPropertyValues, bind, checkAllowedFields, checkRequiredFields, close, construct, convertIfNecessary, convertIfNecessary, convertIfNecessary, convertIfNecessary, createBeanPropertyBindingResult, createDirectFieldBindingResult, findCustomEditor, getAllowedFields, getAutoGrowCollectionLimit, getBindingErrorProcessor, getBindingResult, getConversionService, getDisallowedFields, getInternalBindingResult, getNameResolver, getObjectName, getPropertyAccessor, getPropertyEditorRegistry, getRequiredFields, getSimpleTypeConverter, getTarget, getTargetType, getTypeConverter, getValidator, getValidators, getValidatorsToApply, initBeanPropertyAccess, initDirectFieldAccess, isAllowed, isAutoGrowNestedPaths, isDeclarativeBinding, isIgnoreInvalidFields, isIgnoreUnknownFields, registerCustomEditor, registerCustomEditor, replaceValidators, setAllowedFields, setAutoGrowCollectionLimit, setAutoGrowNestedPaths, setBindingErrorProcessor, setConversionService, setDeclarativeBinding, setDisallowedFields, setExcludedValidators, setIgnoreInvalidFields, setIgnoreUnknownFields, setMessageCodesResolver, setNameResolver, setRequiredFields, setTargetType, setValidator, shouldNotBindPropertyValues, validate, validate
-
Field Details
-
DEFAULT_FIELD_MARKER_PREFIX
Default prefix that field marker parameters start with, followed by the field name: e.g. "_subscribeToNewsletter" for a field "subscribeToNewsletter".Such a marker parameter indicates that the field was visible, that is, existed in the form that caused the submission. If no corresponding field value parameter was found, the field will be reset. The value of the field marker parameter does not matter in this case; an arbitrary value can be used. This is particularly useful for HTML checkboxes and select options.
-
DEFAULT_FIELD_DEFAULT_PREFIX
Default prefix that field default parameters start with, followed by the field name: e.g. "!subscribeToNewsletter" for a field "subscribeToNewsletter".Default parameters differ from field markers in that they provide a default value instead of an empty value.
-
-
Constructor Details
-
WebDataBinder
Create a new WebDataBinder instance, with default object name.- Parameters:
target
- the target object to bind onto (ornull
if the binder is just used to convert a plain parameter value)- See Also:
-
WebDataBinder
Create a new WebDataBinder instance.- Parameters:
target
- the target object to bind onto (ornull
if the binder is just used to convert a plain parameter value)objectName
- the name of the target object
-
-
Method Details
-
setFieldMarkerPrefix
Specify a prefix that can be used for parameters that mark potentially empty fields, having "prefix + field" as name. Such a marker parameter is checked by existence: You can send any value for it, for example "visible". This is particularly useful for HTML checkboxes and select options.Default is "_", for "_FIELD" parameters (e.g. "_subscribeToNewsletter"). Set this to null if you want to turn off the empty field check completely.
HTML checkboxes only send a value when they're checked, so it is not possible to detect that a formerly checked box has just been unchecked, at least not with standard HTML means.
One way to address this is to look for a checkbox parameter value if you know that the checkbox has been visible in the form, resetting the checkbox if no value found. In Spring web MVC, this typically happens in a custom
onBind
implementation.This auto-reset mechanism addresses this deficiency, provided that a marker parameter is sent for each checkbox field, like "_subscribeToNewsletter" for a "subscribeToNewsletter" field. As the marker parameter is sent in any case, the data binder can detect an empty field and automatically reset its value.
- See Also:
-
getFieldMarkerPrefix
Return the prefix for parameters that mark potentially empty fields. -
setFieldDefaultPrefix
Specify a prefix that can be used for parameters that indicate default value fields, having "prefix + field" as name. The value of the default field is used when the field is not provided.Default is "!", for "!FIELD" parameters (e.g. "!subscribeToNewsletter"). Set this to null if you want to turn off the field defaults completely.
HTML checkboxes only send a value when they're checked, so it is not possible to detect that a formerly checked box has just been unchecked, at least not with standard HTML means. A default field is especially useful when a checkbox represents a non-boolean value.
The presence of a default parameter preempts the behavior of a field marker for the given field.
- See Also:
-
getFieldDefaultPrefix
Return the prefix for parameters that mark default fields. -
setBindEmptyMultipartFiles
public void setBindEmptyMultipartFiles(boolean bindEmptyMultipartFiles) Set whether to bind empty MultipartFile parameters. Default is "true".Turn this off if you want to keep an already bound MultipartFile when the user resubmits the form without choosing a different file. Else, the already bound MultipartFile will be replaced by an empty MultipartFile holder.
- See Also:
-
isBindEmptyMultipartFiles
public boolean isBindEmptyMultipartFiles()Return whether to bind empty MultipartFile parameters. -
resolvePrefixValue
@Nullable protected Object resolvePrefixValue(String name, Class<?> type, BiFunction<String, Class<?>, Object> resolver) Check if a value can be resolved ifgetFieldDefaultPrefix()
orgetFieldMarkerPrefix()
is prepended.- Parameters:
name
- the name of the value to resolvetype
- the type of value expectedresolver
- delegate resolver to use for the checks- Returns:
- the resolved value, or
null
- Since:
- 6.1
-
doBind
This implementation performs a field default and marker check before delegating to the superclass binding process.- Overrides:
doBind
in classDataBinder
- Parameters:
mpvs
- the property values to bind, as MutablePropertyValues instance- See Also:
-
checkFieldDefaults
Check the given property values for field defaults, i.e. for fields that start with the field default prefix.The existence of a field defaults indicates that the specified value should be used if the field is otherwise not present.
- Parameters:
mpvs
- the property values to be bound (can be modified)- See Also:
-
checkFieldMarkers
Check the given property values for field markers, i.e. for fields that start with the field marker prefix.The existence of a field marker indicates that the specified field existed in the form. If the property values do not contain a corresponding field value, the field will be considered as empty and will be reset appropriately.
- Parameters:
mpvs
- the property values to be bound (can be modified)- See Also:
-
adaptEmptyArrayIndices
Check for property values with names that end on"[]"
. This is used by some clients for array syntax without an explicit index value. If such values are found, drop the brackets to adapt to the expected way of expressing the same for data binding purposes.- Parameters:
mpvs
- the property values to be bound (can be modified)- Since:
- 5.3
-
getEmptyValue
Determine an empty value for the specified field.The default implementation delegates to
getEmptyValue(Class)
if the field type is known, otherwise falls back tonull
.- Parameters:
field
- the name of the fieldfieldType
- the type of the field- Returns:
- the empty value (for most fields:
null
)
-
getEmptyValue
Determine an empty value for the specified field.The default implementation returns:
Boolean.FALSE
for boolean fields- an empty array for array types
- Collection implementations for Collection types
- Map implementations for Map types
- else,
null
is used as default
- Parameters:
fieldType
- the type of the field- Returns:
- the empty value (for most fields:
null
) - Since:
- 5.0
-
bindMultipart
protected void bindMultipart(Map<String, List<MultipartFile>> multipartFiles, MutablePropertyValues mpvs) Bind all multipart files contained in the given request, if any (in case of a multipart request). To be called by subclasses.Multipart files will only be added to the property values if they are not empty or if we're configured to bind empty multipart files too.
- Parameters:
multipartFiles
- a Map of field name String to MultipartFile objectmpvs
- the property values to be bound (can be modified)- See Also:
-