[
http://jira.jboss.com/jira/browse/RF-2851?page=all ]
Viktor Volkov updated RF-2851:
------------------------------
Description:
<f:subview id="inplaceSelectSubviewID">
This is because such an error can easily be made at programming level, <br />
and while invisible for the user who does not understand or cannot <br />
acquire the source code, many of those
<rich:inplaceSelect id="inplaceSelectID"
tabindex="#{inplaceSelect.tabindex}"
editEvent="#{inplaceSelect.editEvent}"
maxSelectWidth="#{inplaceSelect.maxSelectWidth}"
minSelectWidth="#{inplaceSelect.minSelectWidth}"
selectWidth="#{inplaceSelect.selectWidth}"
defaultLabel="#{inplaceSelect.defaultLabel}"
controlsVerticalPosition="#{inplaceSelect.controlsVerticalPosition}"
controlsHorizontalPosition="#{inplaceSelect.controlsHorizontalPosition}"
value="#{inplaceSelect.value}"
listWidth="#{inplaceSelect.listWidth}"
listHeight="#{inplaceSelect.listHeight}"
selectOnEdit="#{inplaceSelect.selectOnEdit}"
showControls="#{inplaceSelect.showControls}"
editOnTab="#{inplaceSelect.editOnTab}"
openOnEdit="#{inplaceSelect.openOnEdit}"
rendered="#{inplaceSelect.rendered}"
immediate="#{inplaceSelect.immediate}">
<f:selectItem itemLabel="errors" itemValue="errors" />
<f:selectItem itemLabel="fatals" itemValue="fatals" />
<f:selectItem itemLabel="infos" itemValue="infos" />
<f:selectItem itemLabel="passeds" itemValue="passeds" />
<f:selectItem itemLabel="warns" itemValue="warns" />
</rich:inplaceSelect>
are easy to exploit.
<br />
</f:subview
was:
This is because such an error can easily be made at programming level, <br />
and while invisible for the user who does not understand or cannot <br />
acquire the source code, many of those
<rich:inplaceSelect id="inplaceSelectID"
tabindex="#{inplaceSelect.tabindex}"
editEvent="#{inplaceSelect.editEvent}"
maxSelectWidth="#{inplaceSelect.maxSelectWidth}"
minSelectWidth="#{inplaceSelect.minSelectWidth}"
selectWidth="#{inplaceSelect.selectWidth}"
defaultLabel="#{inplaceSelect.defaultLabel}"
controlsVerticalPosition="#{inplaceSelect.controlsVerticalPosition}"
controlsHorizontalPosition="#{inplaceSelect.controlsHorizontalPosition}"
value="#{inplaceSelect.value}"
listWidth="#{inplaceSelect.listWidth}"
listHeight="#{inplaceSelect.listHeight}"
selectOnEdit="#{inplaceSelect.selectOnEdit}"
showControls="#{inplaceSelect.showControls}"
editOnTab="#{inplaceSelect.editOnTab}"
openOnEdit="#{inplaceSelect.openOnEdit}"
rendered="#{inplaceSelect.rendered}"
immediate="#{inplaceSelect.immediate}">
<f:selectItem itemLabel="errors" itemValue="errors" />
<f:selectItem itemLabel="fatals" itemValue="fatals" />
<f:selectItem itemLabel="infos" itemValue="infos" />
<f:selectItem itemLabel="passeds" itemValue="passeds" />
<f:selectItem itemLabel="warns" itemValue="warns" />
</rich:inplaceSelect>
are easy to exploit.
inplaceSelect: can't invoke select by clicking on down arrow
-------------------------------------------------------------
Key: RF-2851
URL:
http://jira.jboss.com/jira/browse/RF-2851
Project: RichFaces
Issue Type: Bug
Affects Versions: 3.2.0
Environment: 3.2.0 CR7
Reporter: Viktor Volkov
Assigned To: Nick Belaevski
Priority: Critical
<f:subview id="inplaceSelectSubviewID">
This is because such an error can easily be made at programming level, <br />
and while invisible for the user who does not understand or cannot <br />
acquire the source code, many of those
<rich:inplaceSelect id="inplaceSelectID"
tabindex="#{inplaceSelect.tabindex}"
editEvent="#{inplaceSelect.editEvent}"
maxSelectWidth="#{inplaceSelect.maxSelectWidth}"
minSelectWidth="#{inplaceSelect.minSelectWidth}"
selectWidth="#{inplaceSelect.selectWidth}"
defaultLabel="#{inplaceSelect.defaultLabel}"
controlsVerticalPosition="#{inplaceSelect.controlsVerticalPosition}"
controlsHorizontalPosition="#{inplaceSelect.controlsHorizontalPosition}"
value="#{inplaceSelect.value}"
listWidth="#{inplaceSelect.listWidth}"
listHeight="#{inplaceSelect.listHeight}"
selectOnEdit="#{inplaceSelect.selectOnEdit}"
showControls="#{inplaceSelect.showControls}"
editOnTab="#{inplaceSelect.editOnTab}"
openOnEdit="#{inplaceSelect.openOnEdit}"
rendered="#{inplaceSelect.rendered}"
immediate="#{inplaceSelect.immediate}">
<f:selectItem itemLabel="errors" itemValue="errors" />
<f:selectItem itemLabel="fatals" itemValue="fatals" />
<f:selectItem itemLabel="infos" itemValue="infos" />
<f:selectItem itemLabel="passeds" itemValue="passeds" />
<f:selectItem itemLabel="warns" itemValue="warns" />
</rich:inplaceSelect>
are easy to exploit.
<br />
</f:subview
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira