Re: MyFaces vulnerable?

Hi The actions has been already taken. Release for myfaces core 1.1.8 and 1.2.9 are on the way and we are working hard to get 2.0.1 out. Unoficially, you can find it here: http://people.apache.org/~lu4242/myfaces129/org/apache/myfaces/core/

Re: MyFaces vulnerable?

Afair also only client side state saving is affected (please correct me if I am wrong), server side state saving which the majority of users use, should be safe. Werner Am 10.06.10 08:54, schrieb Leonardo Uribe: Hi The actions has been already taken. Release for myfaces core 1.1.8 and

Re: MyFaces vulnerable?

Yes, right Werner. You are safe by using server side state saving ;) Regards, Jakob 2010/6/10 Werner Punz werner.p...@gmail.com Afair also only client side state saving is affected (please correct me if I am wrong), server side state saving which the majority of users use, should be safe.

Re: HTMLUnit + MyFaces PPR was Re: [jira] Resolved: (MYFACES-2745) Cannot set property _mfProto of null to null error with new javascript

Ok Michael please keep me updated on pending script bugs, because this is vital to get the 2.0.1 release out of the door. The scripts work fine for browsers but if something broke for htmlunit which worked before we have to fix that (I am not sure if the pending bugs still prevent 2.0.1

Re: MyFaces vulnerable?

Upps I should have read the full answer by Leonardo before posting. Sometimes it is not good to post before having a decent morning coffee. Werner Am 10.06.10 09:57, schrieb Jakob Korherr: Yes, right Werner. You are safe by using server side state saving ;) Regards, Jakob 2010/6/10 Werner

[jira] Commented: (MYFACES-2748) NPE in htmlunit when testing ajax rendering

[ https://issues.apache.org/jira/browse/MYFACES-2748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12877368#action_12877368 ] Werner Punz commented on MYFACES-2748: -- A last comment on this issue, this bug only

Re: [VOTE] release for myfaces core 1.1.8

+1 regards, gerhard http://www.irian.at Your JSF powerhouse - JSF Consulting, Development and Courses in English and German Professional Support for Apache MyFaces 2010/6/9 Jakob Korherr jakob.korh...@gmail.com I am not a PMC, Mike! Thus there only have been 2 binding votes. However we

Re: [VOTE] release for myfaces core 1.2.9

+1 regards, gerhard http://www.irian.at Your JSF powerhouse - JSF Consulting, Development and Courses in English and German Professional Support for Apache MyFaces 2010/6/7 Werner Punz werner.p...@gmail.com +1 Am 07.06.10 20:17, schrieb Grant Smith: +1 On Mon, Jun 7, 2010 at 9:35

Result (was: [VOTE] release for myfaces core 1.1.8)

Hi Thanks to all people who vote. We have 5 +1 Gerhard Petracek Bruno Aranda Jakob Korherr Matthias Wessendorf Leonardo Uribe so we can continue with the necessary steps to release myfaces core 1.1.8 regards, Leonardo Uribe

Result (was: [VOTE] release for myfaces core 1.2.9)

Hi Thanks to all people who vote We have 7 +1 Gerhard Petracek Werner Punz Grant Smith Mike Kienenberger Jakob Korherr Matthias Wessendorf Leonardo Uribe so we can continue with the necessary steps to release myfaces core 1.2.9 regards, Leonardo Uribe

[jira] Updated: (TRINIDAD-1810) Flash component needs public version of NumberConverter.is[Min/Max][Fraction/Integer]DigitsSet() apis

[ https://issues.apache.org/jira/browse/TRINIDAD-1810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Diar Ahmed updated TRINIDAD-1810: - Status: Patch Available (was: Open) Flash component needs public version of

[jira] Created: (MYFACES-2750) Simplify PostRestoreStateEvent delivery requirements

Simplify PostRestoreStateEvent delivery requirements Key: MYFACES-2750 URL: https://issues.apache.org/jira/browse/MYFACES-2750 Project: MyFaces Core Issue Type: Bug Components:

[jira] Commented: (TRINIDAD-1810) Flash component needs public version of NumberConverter.is[Min/Max][Fraction/Integer]DigitsSet() apis

[ https://issues.apache.org/jira/browse/TRINIDAD-1810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12877535#action_12877535 ] Diar Ahmed commented on TRINIDAD-1810: -- Please note that two patches have been

[jira] Updated: (TRINIDAD-1810) Flash component needs public version of NumberConverter.is[Min/Max][Fraction/Integer]DigitsSet() apis

[ https://issues.apache.org/jira/browse/TRINIDAD-1810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Max Starets updated TRINIDAD-1810: -- Status: Resolved (was: Patch Available) Fix Version/s: 2.0.0.3-core

Re: [Trinidad][api] - Any objections / counter-proposals for (TRINIDAD-1810) Flash component needs public version of NumberConverter.is[Min/Max][Fraction/Integer]DigitsSet() apis]

Hi All, I have attached a patch for this issue for trunk as well as the1.2.12.3 branch. It would be great if somebody could commit these patches. Thanks, Diar Diar Ahmed wrote: Hi Again, So what we would like to do to fix this issue is to make the following methods on NumberConverter

[jira] Created: (TRINIDAD-1828) Optimized PPR does not allow renderers to customize how children are visited

Optimized PPR does not allow renderers to customize how children are visited Key: TRINIDAD-1828 URL: https://issues.apache.org/jira/browse/TRINIDAD-1828 Project: MyFaces

[jira] Created: (MYFACES-2749) Encrypted View State does not include Message Authentication Code (MAC)

Encrypted View State does not include Message Authentication Code (MAC) --- Key: MYFACES-2749 URL: https://issues.apache.org/jira/browse/MYFACES-2749 Project: MyFaces Core

[jira] Updated: (TRINIDAD-1827) UIXColumn shoould support being added as a partial target (the table should be PPR-ed in that case).

[ https://issues.apache.org/jira/browse/TRINIDAD-1827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Max Starets updated TRINIDAD-1827: -- Status: Patch Available (was: Open) UIXColumn shoould support being added as a partial

MyFaces Master pom v7 has a snapshot dependency

Hi Myfaces master pom v7 has a snapshot dependency here: build defaultGoalinstall/defaultGoal plugins plugin artifactIdmaven-checkstyle-plugin/artifactId version2.2/version dependencies dependency

Re: MyFaces Master pom v7 has a snapshot dependency

Hi This pom was not deployed using maven deploy command. Instead a hard copy was done, so the user matzew is the only one with enough permissions to make the change. Matthias, could you give me a hand with this one?. In future releases, the preferred way to publish artifacts should be use this

[jira] Reopened: (MYFACES-2342) New objects added for new api in UIViewRoot, UIComponent and UIComponentBase could be saved and restored

[ https://issues.apache.org/jira/browse/MYFACES-2342?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Leonardo Uribe reopened MYFACES-2342: - New objects added for new api in UIViewRoot, UIComponent and UIComponentBase could be