[JBoss JIRA] Assigned: (RF-4561) Example Seam-Discs throws SEVERE Trinidad-Exception
by Tsikhon Kuprevich (JIRA)
[ https://jira.jboss.org/jira/browse/RF-4561?page=com.atlassian.jira.plugin... ]
Tsikhon Kuprevich reassigned RF-4561:
-------------------------------------
Assignee: Mikhail Vitenkov (was: Alexander Smirnov)
> Example Seam-Discs throws SEVERE Trinidad-Exception
> ---------------------------------------------------
>
> Key: RF-4561
> URL: https://jira.jboss.org/jira/browse/RF-4561
> Project: RichFaces
> Issue Type: Bug
> Affects Versions: 3.2.2
> Environment: EJB 3.0, JBOSS 4.2, SEAM 2.1, TRINIDAD (actual version), RichFaces (3.2)
> Reporter: nimo stephan
> Assignee: Mikhail Vitenkov
> Priority: Critical
> Fix For: 3.3.0
>
> Attachments: faces-config.xml, pom.xml, trinidad.xhtml, web.xml
>
>
> I have looked at the seam-disc-example and have run it.
> Though all the trinidad-components are rendered well, the following error occurs:
> org.apache.myfaces.trinidadinternal.renderkit.core.CoreRenderKit createResponseWriter
> SEVERE: No RenderingContext has been created.
> Maybe, the web.xml (faces-config.xml) are not well configured for Seam, Ajax4j (richfaces), Trinidad.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 11 months
[JBoss JIRA] Created: (RF-3586) URLs of resources are not predictable
by Olivier Martin (JIRA)
URLs of resources are not predictable
-------------------------------------
Key: RF-3586
URL: http://jira.jboss.com/jira/browse/RF-3586
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.2.0, 3.1.5, 3.1.4
Reporter: Olivier Martin
The way RichFaces generates URLs for the scripts and styles is incompatible with security restrictions in a corporate world.
When applications are deployed in production, the list of the URLs it uses has to be known : the Firewalls are configured with this "white-list" and a "black-list" forbidding URLs with ".." characters.
For instance the following URL has several problems :
a4j_3_1_5.GAcss/table.xcss/DATB/eAF7P..bLgAIQwM..faces
* The prefix "a4j_3_1_5.GA" can be configured, but usually the projects don't bother to do it, thus this part is gonna change with each RichFaces release
* The part "eAF7P..bLgAIQwM." is unpredictable, it depends on the value of the object SkinImpl.hashcode() ?!!
* The part "eAF7P..bLgAIQwM." contains ".."' characters
Overall we had to bypass the usual security restrictions to put an application in production, this is unacceptable.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
15 years, 11 months