[JBoss JIRA] Resolved: (RFPL-72) Discuss security issues of client-side "execute" set definition
- First Post
- Replies
- Stats
-
Go to
- ----- 2026 -----
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
[
https://issues.jboss.org/browse/RFPL-72?page=com.atlassian.jira.plugin.sy...
]
Nick Belaevski resolved RFPL-72.
--------------------------------
Resolution: Done
After discussion with Ilya we've decided that JSF standard approach is not very safe
and should not be supported.
Furthermore, support of client-side 'execute' definition is not necessary for
RichFaces components. Users can use f:ajax any time they need this thing.
Discuss security issues of client-side "execute" set
definition
---------------------------------------------------------------
Key: RFPL-72
URL: https://issues.jboss.org/browse/RFPL-72
Project: RichFaces Planning
Issue Type: Task
Security Level: Public(Everyone can see)
Affects Versions: 4.0.0.ALPHA1
Reporter: Nick Belaevski
Assignee: Nick Belaevski
Labels: design, tran
Fix For: 4.Future
JSF 2 allows specification of 'execute' and 'render' via request
parameters. We use different approach, but need to discuss whether it is safe enough for
our components to be supported.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
5487
days inactive
5487
days old
richfaces-planning-issues@lists.jboss.org
0 comments
1 participants
tags (0)
participants (1)
-
Nick Belaevski (JIRA)