[
https://issues.apache.org/jira/browse/MYFACES-2714?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12868098#action_12868098
]
Jan-Kees van Andel commented on MYFACES-2714:
---------------------------------------------
For archiving, this is the email conversation:
----------------------------------------------
Jan-Kees van Andel aan MyFaces
details weergeven 15 mei (2 dagen geleden)
The plan sounds good, but let's not forget the performance penalty of loading
multiple javascript files when in production mode. No objections for loading
multiple files in development mode.
Maybe, we should even (from a security perspective) completely deny access to
the debug versions of the scripts when in production mode.
My 2 cents...
Regards,
Jan-Kees
----------------------------------------------
Michael Concini aan MyFaces
details weergeven 15 mei (2 dagen geleden)
I think Jan-Kees has a good point on denying access to the debug versions when
in production mode. At least by default it might be good to deny access.
----------------------------------------------
Definitely +1 from my side regarding this, debug versions
should definitely be for development mode only.
Werner
----------------------------------------------
Hi
I have attached a patch (MYFACES-2714-3.patch) that do what was suggested by
Werner, including do not allow retrieve the javascript sources on production.
Please, take a look at this one and if no objections, I'll commit the code.
regards,
Leonardo Uribe
> Include uncompressed jsf.js file and use it when development mode is used
> -------------------------------------------------------------------------
>
> Key: MYFACES-2714
> URL: https://issues.apache.org/jira/browse/MYFACES-2714
> Project: MyFaces Core
> Issue Type: Improvement
> Components: JSR-314
> Affects Versions: 2.0.0
> Reporter: Leonardo Uribe
> Assignee: Leonardo Uribe
> Attachments: MYFACES-2714-2.patch, MYFACES-2714-3.patch
>
>
> Reading some blogs about jsf 2.0, I notice mojarra include an uncompressed
> jsf.js file and use it when development mode is used. It is difficult to
> debug myfaces javascript for users and I think it is worth to do it too.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
