rich:panelMenuItem executes action even if disabled attribute evaluates to true ------------------------------------------------------------------------------- Key: RF-12813 URL: https://issues.jboss.org/browse/RF-12813 Project: RichFaces Issue Type: Bug Security Level: Public(Everyone can see) Components: component-menu Affects Versions: 4.3.0.Final Reporter: Andrey Zhemoytuk Assignee: Brian Leathem Fix For: 4.3.5, 4.5.0.Alpha2, 5.0.0.Alpha3 Original Estimate: 30 minutes Remaining Estimate: 30 minutes org.richfaces.renderkit.html.PanelMenuItemRenderer#doDecode does not check 'disabled' attribute (how usually do other components before executing action) which may cause security issues. Initially reported on: http://stackoverflow.com/questions/15130807/richfaces-panelmenuitem-reeva...