[jira] [Commented] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread Moritz Bechler (JIRA)
[ https://issues.apache.org/jira/browse/MYFACES-4021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15030127#comment-15030127 ] Moritz Bechler commented on MYFACES-4021: - Yeah, agreed on both points (at least as long

[jira] [Commented] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread Mark Struberg (JIRA)
[ https://issues.apache.org/jira/browse/MYFACES-4021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15030092#comment-15030092 ] Mark Struberg commented on MYFACES-4021: If someone uses client side state saving and no

Re: [jira] [Commented] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread karl . kilden
Side note: Why would anyone turn off client side encryption? Sounds like a very poor idea > 27 nov. 2015 kl. 19:11 skrev Moritz Bechler (JIRA) : > > >[ >

[jira] [Commented] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread Moritz Bechler (JIRA)
[ https://issues.apache.org/jira/browse/MYFACES-4021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029816#comment-15029816 ] Moritz Bechler commented on MYFACES-4021: - Blacklisting does not fix this. If that code can be

[jira] [Commented] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread Moritz Bechler (JIRA)
[ https://issues.apache.org/jira/browse/MYFACES-4021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029853#comment-15029853 ] Moritz Bechler commented on MYFACES-4021: - Me neither, I'd guess with server side state saving

[jira] [Commented] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread Romain Manni-Bucau (JIRA)
[ https://issues.apache.org/jira/browse/MYFACES-4021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029825#comment-15029825 ] Romain Manni-Bucau commented on MYFACES-4021: - [~mbechler] I dont know enough myfaces

[jira] [Created] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream

2015-11-27 Thread Romain Manni-Bucau (JIRA)
Romain Manni-Bucau created MYFACES-4021: --- Summary: blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream Key: MYFACES-4021 URL:

[jira] [Commented] (TOBAGO-1473) Remove selenium legacy dependency

2015-11-27 Thread Dennis Kieselhorst (JIRA)
[ https://issues.apache.org/jira/browse/TOBAGO-1473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029940#comment-15029940 ] Dennis Kieselhorst commented on TOBAGO-1473: I played around with selenese-runner and was

[jira] [Comment Edited] (TOBAGO-1473) Remove selenium legacy dependency

2015-11-27 Thread Dennis Kieselhorst (JIRA)
[ https://issues.apache.org/jira/browse/TOBAGO-1473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029940#comment-15029940 ] Dennis Kieselhorst edited comment on TOBAGO-1473 at 11/27/15 2:57 PM:

[jira] [Comment Edited] (TOBAGO-1473) Remove selenium legacy dependency

2015-11-27 Thread Dennis Kieselhorst (JIRA)
[ https://issues.apache.org/jira/browse/TOBAGO-1473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029940#comment-15029940 ] Dennis Kieselhorst edited comment on TOBAGO-1473 at 11/27/15 2:57 PM:

[jira] [Commented] (MYFACES-3987) NPE in FlashImpl.isKeepMessages

2015-11-27 Thread Dennis Kieselhorst (JIRA)
[ https://issues.apache.org/jira/browse/MYFACES-3987?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15029985#comment-15029985 ] Dennis Kieselhorst commented on MYFACES-3987: - FacesContext is somehow gone in that case.

Re: [VOTE] Release of MyFaces Core 2.2.9

2015-11-27 Thread Werner Punz
+1 Am 24.11.15 um 04:16 schrieb Leonardo Uribe: Hi, I was running the needed tasks to get the 2.2.9 release of Apache MyFaces core out. The artifacts passed the TCK test of Feb 2013 (jsftck-2.2_26-Feb-2013.zip). Please note that this vote concerns all of the following parts: 1. Maven

Re: [VOTE] Release of MyFaces Core 2.2.9

2015-11-27 Thread Udo Schnurpfeil
+1 Regards, Udo Am 26.11.15 um 17:53 schrieb Mike Kienenberger: > - signatures and checksums match > - source builds > - apache rat passes > > +1 > > > > > > > Below are the linux commands I used to verify the release of the > myfaces-core-assembly-2.2.9-src files: > >