[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12467283
]
Stefan Betermieux commented on MYFACES-1467:
Hi,
I am coming from TOMAHAWK-850 where I have reported
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12467291
]
Cagatay Civici commented on MYFACES-1467:
-
This issue leads to other problems for us since it's related to
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12467292
]
Matthias Weßendorf commented on MYFACES-1467:
-
All,
since the added patch (added because of security
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12467393
]
David Chandler commented on MYFACES-1467:
-
Has the spec already been amended to address this issue?
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12464501
]
David Chandler commented on MYFACES-1467:
-
Jeff, Cristi, you're absolutely right. There is no conflict
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12464276
]
Jeff Bischoff commented on MYFACES-1467:
I have also noticed the breakage in my code that Cristi noted.
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12463860
]
Grigoras Cristinel commented on MYFACES-1467:
-
Hi ,
This change in code have break the disabled
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12463863
]
Matthias Weßendorf commented on MYFACES-1467:
-
Cristi-
I also expect readonly impact.
can you test ?
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12463881
]
Grigoras Cristinel commented on MYFACES-1467:
-
Mathias,
Yes the same behavior.
Cristi
Validation
[
https://issues.apache.org/jira/browse/MYFACES-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12464106
]
David Chandler commented on MYFACES-1467:
-
Cristi,
Good catch. Just to clarify, you're saying what's
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12443261
]
David Chandler commented on MYFACES-1467:
-
I suspect there are still other issues here, but to get the immediate security
problem resolved, I will
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12443127
]
Adam Winer commented on MYFACES-1467:
-
It cannot be fixed in UIInput once for all, because the spec describes how
UIInput must behave. There are no
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12443147
]
David Chandler commented on MYFACES-1467:
-
Alas, I am in anguish, Adam. I do not see how the proposed patch violates the
spec.
If a submitted value
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442502
]
Martin Marinschek commented on MYFACES-1467:
Yes, I agree that this might be better off in an extended framework. But how to
build this extended
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442593
]
David Chandler commented on MYFACES-1467:
-
Thanks everyone for your contributions.
If I may summarize Craig's comments, skipping validation for a null
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442373
]
Matthias Weßendorf commented on MYFACES-1467:
-
I pretty much think that the single value validation is a good thing. JSF is a
spec not a product.
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442459
]
Adam Winer commented on MYFACES-1467:
-
With regards to the original issue: the bug is *not* in UIInput, but is in
fact in the decode() implementation for
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442275
]
Cagatay Civici commented on MYFACES-1467:
-
I agree, it's a spec issue rather than a myfaces issue.
Validation doesn't run for required fields if
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442311
]
Matthias Weßendorf commented on MYFACES-1467:
-
Cagatay,
it's not that much important, how the RI behaves... if there is the same bug, I
am fine
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442354
]
David Chandler commented on MYFACES-1467:
-
Thanks for thinking this over, Cagatay and Matthias.
The more I think about this, the less I think it's a
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442359
]
Martin Marinschek commented on MYFACES-1467:
Hi David, Cagatay, Matthias,
this bug is indeed a problem in the sourcebase. On a sidenote - I believe
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442362
]
Craig McClanahan commented on MYFACES-1467:
---
On a sidenote - I believe that it is bad to skip validation at all if the
value of a field is null.
I
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442363
]
Martin Marinschek commented on MYFACES-1467:
Hi Craig,
what do you say to my reasoning for cases where required is either true or
false, depending
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442364
]
Craig McClanahan commented on MYFACES-1467:
---
what do you say to my reasoning for cases where required is either true or
false, depending on the
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442108
]
Cagatay Civici commented on MYFACES-1467:
-
I've doubts about this, if submitted value is null it means the component isn't
submitted at all and it does
[
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442266
]
David Chandler commented on MYFACES-1467:
-
Agreed in part. It's actually a bug in the spec due to these conflicting
requirements:
Section 3.5.4
26 matches
Mail list logo