[richfaces-issues] [JBoss JIRA] (RF-12813) rich:panelMenuItem executes action even if disabled attribute evaluates to true

[Brian Leathem (JIRA)]

     [ https://issues.jboss.org/browse/RF-12813?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Leathem updated RF-12813:
-------------------------------

     Original Estimate: 30 minutes
    Remaining Estimate: 30 minutes

    
> rich:panelMenuItem executes action even if disabled attribute evaluates to true
> -------------------------------------------------------------------------------
>
>                 Key: RF-12813
>                 URL: https://issues.jboss.org/browse/RF-12813
>             Project: RichFaces
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: component-menu
>    Affects Versions: 4.3.0.Final
>            Reporter: Andrey Zhemoytuk
>             Fix For: 5.0.0.Alpha2
>
>   Original Estimate: 30 minutes
>  Remaining Estimate: 30 minutes
>
> org.richfaces.renderkit.html.PanelMenuItemRenderer#doDecode does not check 'disabled' attribute (how usually do other components before executing action) which may cause security issues.
> Initially reported on:
> http://stackoverflow.com/questions/15130807/richfaces-panelmenuitem-reevaluating-disabled-not-working

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira