[
https://issues.jboss.org/browse/RF-12813?page=com.atlassian.jira.plugin.s...
]
Pavol Pitonak updated RF-12813:
-------------------------------
Labels: (was: needs-qe)
rich:panelMenuItem executes action even if disabled attribute
evaluates to true
-------------------------------------------------------------------------------
Key: RF-12813
URL:
https://issues.jboss.org/browse/RF-12813
Project: RichFaces
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: component-menu
Affects Versions: 4.3.0.Final
Reporter: Andrey Zhemoytuk
Assignee: Brian Leathem
Fix For: 4.3.5, 4.5.0.Alpha2, 5.0.0.Alpha3
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
org.richfaces.renderkit.html.PanelMenuItemRenderer#doDecode does not check
'disabled' attribute (how usually do other components before executing action)
which may cause security issues.
Initially reported on:
http://stackoverflow.com/questions/15130807/richfaces-panelmenuitem-reeva...
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira