[ http://issues.apache.org/jira/browse/ADFFACES-231?page=all ]
John Fan updated ADFFACES-231:
------------------------------
Attachment: patchWithNameIDEncod.patch
The purpose of this patch is to make sure that URLs rendered in pages are all
encoded.
URLs are encoded by ultimately calling:
facesContext.getExternalContext().encodeActionURL()
facesContext.getExternalContext().encodeResourceURL()
In order for non faces major class to do encoding, the following new methods
are created in BaseLafRenderer class:
protected String encodeActionURL
protected String encodeResourceURL
protected void renderEncodedActionURI
protected void renderEncodedResourceURI
For all HTML Id and name attributes rendered as URL, I am assuming they will be
used as Action URLs.
> URL Encoding
> ------------
>
> Key: ADFFACES-231
> URL: http://issues.apache.org/jira/browse/ADFFACES-231
> Project: MyFaces ADF-Faces
> Issue Type: Bug
> Components: Portlet
> Environment: JSR-168
> Reporter: Scott O'Bryan
> Attachments: patchWithNameIDEncod.patch
>
>
> All url's from the server need to be run through encodeResourceURL or
> encodeActionURL before they are sent to the client. There are many places
> where this is not done.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
