[
https://jira.jboss.org/jira/browse/JBPORTAL-2356?page=com.atlassian.jira....
]
Thomas Heute commented on JBPORTAL-2356:
----------------------------------------
This example:
https://svn.jboss.org/repos/portal/examples/tags/JBoss_Portal_2_7_2/JSPHe...
Will run fine on JBoss Portal 2.7.2 and EAP 4.3.
Now maybe the portlet container sample portal indeed has a bug, but there was no recent
release of this project with the newest code.
Passing parameters straight from the browser to the portlet is an obvious risk of
collision.
It is impossible to use html forms in portlets or js to build http
request
--------------------------------------------------------------------------
Key: JBPORTAL-2356
URL:
https://jira.jboss.org/jira/browse/JBPORTAL-2356
Project: JBoss Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Portal Portlet
Affects Versions: Portlet-2.0.1
Environment: Linux, Java 5, Tomcat, JBoss Portlet Container 2.0
Reporter: Bernard de Terwangne
JBoss Portlet container conforms to the spec so well that it becomes unusable. It is
impossible to query the end-user for a value and pass that value in processAction or
serveResource calls. Let's say you write this in your JSP page :
<form action="<portlet:actionURL><portlet:param name='q'
value='yop'/></portlet:actionURL">
<input name="q" type="text/>
<input type="submit"/>
</form>
and in the Java code
public void processAction(ActionRequest req, ActionResponse res)
throws IOException, PortletException {
System.out.println(req.getParameter("q");
}
The printed value will allways be "yop" (the value placed in the portlet:param
tag. There is no way to retrieve the value actually typed by the end user.
This is due to the fact JBoss Portlet container mangles in Base64 the parameters from
<portlet:param> and disregards parameters appended by the browser's form
implementation. Same thing with <resourceURL>. There is no way to pass user input to
the portlet's Java code.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira