Re: Huge amount of "SessionScope not active" since upgrade to 2.3.8

2021-03-05 Thread Thomas Andraschko
this is also explained here: https://github.com/apache/myfaces/blob/2.3.x/impl/src/main/java/org/apache/myfaces/cdi/view/ViewScopeBeanHolder.java#L187 in think the CDIManagedBeanHandlerImpl.java#

Re: Huge amount of "SessionScope not active" since upgrade to 2.3.8

2021-03-05 Thread Thomas Andraschko
the problem and described is actually here: https://github.com/apache/myfaces/blob/2.3.x/impl/src/main/java/org/apache/myfaces/cdi/impl/CDIManagedBeanHandlerImpl.java#L113 on the one hand, we rely on @PreDestroy on ViewScopeBeanHolder, on the other hand we manually invoke the

Re: Huge amount of "SessionScope not active" since upgrade to 2.3.8

2021-03-05 Thread Thomas Andraschko
This could be the reason: https://issues.apache.org/jira/browse/MYFACES-4353 Am Fr., 5. März 2021 um 14:19 Uhr schrieb Thomas Andraschko < andraschko.tho...@gmail.com>: > Can you try to find the version which introduced it? > > Am Fr., 5. März 2021 um 13:57 Uhr schrieb Juri Berlanda < >

Re: Huge amount of "SessionScope not active" since upgrade to 2.3.8

2021-03-05 Thread Thomas Andraschko
Can you try to find the version which introduced it? Am Fr., 5. März 2021 um 13:57 Uhr schrieb Juri Berlanda < juri.berla...@tuwien.ac.at>: > Hello, > > we recently upgraded to MyFaces 2.3.8 due to the CSRF vulnerability > reported here late February. We were on 2.3.4 before. Since then we see >