Daniel Fernández

+1, I also think rankings won't really be correct unless repositories to other organizations (which are 99,99% for some of us) are also taken into account.

This looks like an issue at the code that identifies use of request parameters. Unescaped expressions fall under the _restricted expression execution_ scenarios, and those `.param` are probably being (wrongly)...

I'm sorry but I'm unable to verify your issue. Your demo application is hugely complex, with dozens of apparently unneeded dependencies, some of them included from repositories that I don't...

Note this can only happen when Thymeleaf is being executed with the template cache _disabled_, as it is the only way it can happen that the parser (AttoParser) actually drives...

There seems to be an error either accessing or processing your `error.html` page. At first sight I'd go more for the former, but anyway, the problem is that, as the...

Moved to the Wish List

@sobemurray it is possible if you create a dialect that implements `IExecutionAttributeDialect`. The specific SpEL expression parser and evaluator are specified as _execution attributes_, so you can overload these with...

@sobemurray equivalent mechanism, only in 2.1 it ilved in the `IDialect` interface itself: https://github.com/thymeleaf/thymeleaf/blob/thymeleaf-2.1.4.RELEASE/src/main/java/org/thymeleaf/dialect/IDialect.java#L108-L121

What type of support would you be expecting for these, at the Spring MVC side? At first thought, including a dependency on Reactor at the Spring MVC side could be...

Could you please confirm that you are calling `#fields.detailedErrors()` from _inside_ an element with a `th:object` for the form-backing bean? (such as ``) The thing is that the `Errors` object...