Security question: how to secure Hibernate collections coming back from client to server?
问题 I've got a simple pojo named "Parent" which contains a collection of object "Child". In hibernate/jpa, it's simply a one-to-many association, children do not know their parent: these Child objects can have different type of Parent so it easier to not know the parent (think of Child which represents Tags and parents can be different object types which have tags). Now, I send my Parent object to the client view of my web site to allow user to modify it. For it, I use Hibernate/GWT/Gilead. My