[JBoss JIRA] Created: (RF-3586) URLs of resources are not predictable
by Olivier Martin (JIRA)
URLs of resources are not predictable
-------------------------------------
Key: RF-3586
URL: http://jira.jboss.com/jira/browse/RF-3586
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.2.0, 3.1.5, 3.1.4
Reporter: Olivier Martin
The way RichFaces generates URLs for the scripts and styles is incompatible with security restrictions in a corporate world.
When applications are deployed in production, the list of the URLs it uses has to be known : the Firewalls are configured with this "white-list" and a "black-list" forbidding URLs with ".." characters.
For instance the following URL has several problems :
a4j_3_1_5.GAcss/table.xcss/DATB/eAF7P..bLgAIQwM..faces
* The prefix "a4j_3_1_5.GA" can be configured, but usually the projects don't bother to do it, thus this part is gonna change with each RichFaces release
* The part "eAF7P..bLgAIQwM." is unpredictable, it depends on the value of the object SkinImpl.hashcode() ?!!
* The part "eAF7P..bLgAIQwM." contains ".."' characters
Overall we had to bypass the usual security restrictions to put an application in production, this is unacceptable.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
17 years, 3 months
[JBoss JIRA] Created: (RF-3115) rich:fileUpload produce (sometimes) a empty page
by Andreas Höhmann (JIRA)
rich:fileUpload produce (sometimes) a empty page
------------------------------------------------
Key: RF-3115
URL: http://jira.jboss.com/jira/browse/RF-3115
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.2.1
Environment: jetty 1.6.1
myfaces 1.2.2
Reporter: Andreas Höhmann
Priority: Critical
I don't know why ... but sometimes the upload returns a empty page.
I open a modal-dialog with a fileUpload ... then select a file (immediateUpload="true") then sometimes a empty white page is the result.
My upload-bean is allways triggered correctly (uploadListener works fine ...file is ok etc.) but it seams the rerendering works not fine allways?1
The empty page contains only a "</html>"
Here is my upload-Dialog:
<a4j:region id="modalPanelLoadWorkspace_region">
<dialog:modalDialog id="modalPanelLoadWorkspace"
dialogBean="#{LoadWorkspaceCommandBean}"
titel="#{bundle['dialog.load.workspace.title']}">
<!-- lade-dialog zeigt seinen status im dialog-header an -->
<ui:define name="dialogheader">
<h:outputText value="#{titel}"/>
<a4j:status for="modalPanelLoadWorkspace_region">
<f:facet name="start">
<h:panelGroup layout="horizontal">
<h:outputText styleClass="loading" style="padding-left: 10px;" value="#{bundle['ajax.loading.message']}"/>
</h:panelGroup>
</f:facet>
</a4j:status>
</ui:define>
<ui:define name="dialogbody">
<a4j:jsFunction name="afterUpload" reRender="#{initParam.defaultRerenderTarget}" oncomplete="#{closeAction}" ajaxSingle="true" limitToList="true"/>
<rich:fileUpload id="modalPanelLoadWorkspace_upload"
fileUploadListener="#{LoadWorkspaceCommandBean.uploadListener}"
maxFilesQuantity="1"
acceptedTypes="xml"
listHeight="70"
immediateUpload="true"
autoclear="true"
addControlLabel="#{bundle['dialog.load.workspace.button.add']}"
uploadControlLabel="#{bundle['dialog.load.workspace.button.start']}"
cancelEntryControlLabel="#{bundle['dialog.load.workspace.button.cancel']}"
clearControlLabel="#{bundle['dialog.load.workspace.button.clear']}"
clearAllControlLabel="#{bundle['dialog.load.workspace.button.clear_all']}"
ontyperejected="alert('#{bundle['dialog.load.workspace.unsupported_filetype']}')"
onsizerejected="alert('#{bundle['dialog.load.workspace.max_filesize_reached']}')"
onuploadcomplete="afterUpload();">
<f:facet name="label">
<h:outputText value="#{bundle['dialog.load.workspace.progress_status']}"/>
</f:facet>
<f:facet name="progress">
<rich:progressBar style="width: 100%;"/>
</f:facet>
</rich:fileUpload>
</ui:define>
<ui:define name="dialog_ok"/>
<ui:define name="dialog_cancel"/>
</dialog:modalDialog>
</a4j:region>
* <dialog:modalDialog> is a facelets-tag which contains a rich:modalPanel + some commons stuff (close-X, ok-button etc.)
* i define a region to show a separated status (nice2have)
* the a4j:jsFunction is only a hack until rich:fileUpload supports a reRender-attribute (should i open a new bug for this?)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
17 years, 3 months
[JBoss JIRA] Created: (RF-3147) suggestionBox: incorrect styles displaying under Safari browser.
by Mikhail Vitenkov (JIRA)
suggestionBox: incorrect styles displaying under Safari browser.
----------------------------------------------------------------
Key: RF-3147
URL: http://jira.jboss.com/jira/browse/RF-3147
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.1.5
Environment: Safari
Reporter: Mikhail Vitenkov
Assigned To: Nick Belaevski
Priority: Minor
Step 1. Navigate to page contained tested rich:suggestionBox component.
Step 2. Activate suggestionBox by inputing any character inside component's input field.
Step 3. Push 'Down Arrow'.
Step 4. Verify pop up list items' styles.
Step 5. Push 'Down Arrow' again.
Actual behavior:
After Step 2 pop up list sometimes doesn't appear;
After Step 3 pop up list appears, but all items have selectedClass style.
After Step 5 selectedClass style isn't loaded for selected item.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
17 years, 3 months