[richfaces-issues] [JBoss JIRA] Reopened: (RF-3916) a4j:htmlCommandLink doesn't encode its value

a4j:htmlCommandLink doesn't encode its value -------------------------------------------- Key: RF-3916 URL: https://jira.jboss.org/jira/browse/RF-3916 Project: RichFaces Issue Type: Bug Security Level: Public(Everyone can see) Affects Versions: 3.1.2 Reporter: Lars Koedderitzsch Assignee: Tsikhon Kuprevich Priority: Critical Fix For: 3.2.2 a4j:htmlCommandLink doesn't encode its value - which opens a door for malicious attacks against RichFaces applications, e.g. the injection of scripts. The bug is also present in 3.2.1.