seam-issues October 2013

seam-issues@lists.jboss.org

1 participants
4 discussions

[JBoss JIRA] (JBSEAM-5127) SeamNavigationHandler is not JSF2 compliant

by Marek Novotny (JIRA)

[ https://issues.jboss.org/browse/JBSEAM-5127?page=com.atlassian.jira.plugi... ] Marek Novotny resolved JBSEAM-5127. ----------------------------------- Fix Version/s: 2.3.2.CR1 Resolution: Done > SeamNavigationHandler is not JSF2 compliant > ------------------------------------------- > > Key: JBSEAM-5127 > URL: https://issues.jboss.org/browse/JBSEAM-5127 > Project: Seam 2 > Issue Type: Bug > Components: JSF Integration > Affects Versions: 2.3.0.Final > Reporter: Ilia Vassilev > Assignee: Marek Novotny > Fix For: 2.3.2.CR1 > > > From javax.faces.application.NavigationHandler: > {code} > * <p class="changed_added_2_0">This method must set the render targets > * (used in partial rendering) to <code>render all </code> > * invoking {@link javax.faces.context.PartialViewContext#setRenderAll}) > * if the view identifier has changed as the result of an application > * action (to take into account <code>Ajax requests</code>).</p> > public abstract void handleNavigation(FacesContext context, > String fromAction, > String outcome); > {code} > org.jboss.seam.jsf.SeamNavigationHandler doesn't implement it and therefore an ajax-view-change cannot be detected by PartialViewContext. Result: nothing will be rendered. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

10 years, 6 months

1
0
0 / 0

[JBoss JIRA] (JBSEAM-5128) Add session['class'] to EL blacklist

by Marek Novotny (JIRA)

[ https://issues.jboss.org/browse/JBSEAM-5128?page=com.atlassian.jira.plugi... ] Marek Novotny resolved JBSEAM-5128. ----------------------------------- Fix Version/s: 2.3.2.CR1 Resolution: Done > Add session['class'] to EL blacklist > ------------------------------------ > > Key: JBSEAM-5128 > URL: https://issues.jboss.org/browse/JBSEAM-5128 > Project: Seam 2 > Issue Type: Task > Components: EL > Affects Versions: 2.3.0.Final, 2.3.1.Final > Reporter: David Jorm > Assignee: Marek Novotny > Priority: Critical > Fix For: 2.3.2.CR1 > > > As a hardening measure, add session['class'] to EL blacklist to protect against EL remote code execution attacks. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

10 years, 6 months

1
0
0 / 0

[JBoss JIRA] (JBSEAM-5128) Add session['class'] to EL blacklist

by Marek Novotny (JIRA)

[ https://issues.jboss.org/browse/JBSEAM-5128?page=com.atlassian.jira.plugi... ] Marek Novotny updated JBSEAM-5128: ---------------------------------- Summary: Add session['class'] to EL blacklist (was: CLONE - Add session['class'] to EL blacklist) > Add session['class'] to EL blacklist > ------------------------------------ > > Key: JBSEAM-5128 > URL: https://issues.jboss.org/browse/JBSEAM-5128 > Project: Seam 2 > Issue Type: Task > Components: EL > Affects Versions: 2.3.0.Final, 2.3.1.Final > Reporter: David Jorm > Assignee: Marek Novotny > Priority: Critical > > As a hardening measure, add session['class'] to EL blacklist to protect against EL remote code execution attacks. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

10 years, 6 months

1
0
0 / 0

[JBoss JIRA] (JBSEAM-5128) CLONE - Add session['class'] to EL blacklist

by Marek Novotny (JIRA)

[ https://issues.jboss.org/browse/JBSEAM-5128?page=com.atlassian.jira.plugi... ] Marek Novotny moved WFK2-204 to JBSEAM-5128: -------------------------------------------- Project: Seam 2 (was: JBoss WFK 2) Key: JBSEAM-5128 (was: WFK2-204) Issue Type: Task (was: Bug) Workflow: GIT Pull Request workflow (was: CDW v1) Affects Version/s: 2.3.1.Final 2.3.0.Final (was: 2.3.0.GA) Component/s: EL (was: Seam 2) Security: (was: JBoss Internal) Target Release: (was: 2.4.0.GA) > CLONE - Add session['class'] to EL blacklist > -------------------------------------------- > > Key: JBSEAM-5128 > URL: https://issues.jboss.org/browse/JBSEAM-5128 > Project: Seam 2 > Issue Type: Task > Components: EL > Affects Versions: 2.3.1.Final, 2.3.0.Final > Reporter: David Jorm > Assignee: Marek Novotny > Priority: Critical > > As a hardening measure, add session['class'] to EL blacklist to protect against EL remote code execution attacks. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

10 years, 6 months

1
0
0 / 0

← Newer
1
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

seam-issues October 2013