Annotation Interface ModelAttribute
@RequestMapping
methods.
WARNING: Data binding can lead to security issues by exposing parts of the object graph that are not meant to be accessed or modified by external clients. Therefore the design and use of data binding should be considered carefully with regard to security. For more details, please refer to the dedicated sections on data binding for Spring Web MVC and Spring WebFlux in the reference manual.
@ModelAttribute can be used to expose command objects to a web view,
using specific attribute names, by annotating corresponding parameters of an
@RequestMapping method.
@ModelAttribute can also be used to expose reference data to a web
view by annotating accessor methods in a controller class with
@RequestMapping methods. Such accessor
methods are allowed to have any arguments that
@RequestMapping methods support, returning
the model attribute value to expose.
Note however that reference data and all other model content are
not available to web views when request processing results in an
Exception since the exception could be raised at any time
making the content of the model unreliable. For this reason
@ExceptionHandler methods do not provide
access to a Model argument.
- Since:
- 2.5
- Author:
- Juergen Hoeller, Rossen Stoyanchev, Sebastien Deleuze
- See Also:
-
Optional Element Summary
Optional ElementsModifier and TypeOptional ElementDescriptionbooleanAllows data binding to be disabled directly on an@ModelAttributemethod parameter or on the attribute returned from an@ModelAttributemethod, both of which would prevent data binding for that attribute.The name of the model attribute to bind to.Alias forname().
-
Element Details
-
value
Alias forname().- Default:
- ""
-
name
The name of the model attribute to bind to.The default model attribute name is inferred from the declared attribute type (i.e. the method parameter type or method return type), based on the non-qualified class name: e.g. "orderAddress" for class "mypackage.OrderAddress", or "orderAddressList" for "List<mypackage.OrderAddress>".
- Since:
- 4.3
- Default:
- ""
-
binding
boolean bindingAllows data binding to be disabled directly on an@ModelAttributemethod parameter or on the attribute returned from an@ModelAttributemethod, both of which would prevent data binding for that attribute.By default this is set to
truein which case data binding applies. Set this tofalseto disable data binding.- Since:
- 4.3
- Default:
- true
-