[JBoss JIRA] Created: (RF-4153) inplaceSelect: defaultLabel should or shouln't be displayed in the Editable state for inplaceSelect component with controls
by Tatyana Romanovich (JIRA)
inplaceSelect: defaultLabel should or shouln't be displayed in the Editable state for inplaceSelect component with controls
---------------------------------------------------------------------------------------------------------------------------
Key: RF-4153
URL: https://jira.jboss.org/jira/browse/RF-4153
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.2.2
Environment: RF-3.2.2.BETA3
Tomcat 6.0
rich-faces demo application
Reporter: Tatyana Romanovich
Assignee: Nick Belaevski
Priority: Minor
Attachments: inplaceSelectdeflabel.gif
1. Go to the demo site
2. select inplaceSelect component
3. find second or example (components with controls)
4. click on the inplaceSelect to edit
Result: list was expanded, default label displays in the input field
5. click cancel button
6. click on the inplaceSelect to edit again
Result: list was expanded, empty value displays in the input field
Note: in my mind behavior should be the same during each edit operation: default label should displays always or never in booth cases (at first time and other)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
17 years, 3 months
[JBoss JIRA] Created: (RF-3586) URLs of resources are not predictable
by Olivier Martin (JIRA)
URLs of resources are not predictable
-------------------------------------
Key: RF-3586
URL: http://jira.jboss.com/jira/browse/RF-3586
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.2.0, 3.1.5, 3.1.4
Reporter: Olivier Martin
The way RichFaces generates URLs for the scripts and styles is incompatible with security restrictions in a corporate world.
When applications are deployed in production, the list of the URLs it uses has to be known : the Firewalls are configured with this "white-list" and a "black-list" forbidding URLs with ".." characters.
For instance the following URL has several problems :
a4j_3_1_5.GAcss/table.xcss/DATB/eAF7P..bLgAIQwM..faces
* The prefix "a4j_3_1_5.GA" can be configured, but usually the projects don't bother to do it, thus this part is gonna change with each RichFaces release
* The part "eAF7P..bLgAIQwM." is unpredictable, it depends on the value of the object SkinImpl.hashcode() ?!!
* The part "eAF7P..bLgAIQwM." contains ".."' characters
Overall we had to bypass the usual security restrictions to put an application in production, this is unacceptable.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
17 years, 3 months