[ 
http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442311 
] 
            
Matthias Weßendorf commented on MYFACES-1467:
---------------------------------------------

Cagatay,

it's not that much important, how the RI behaves... if there is the same bug, I 
am fine with that :)
But... why is that bug there? Because the javadoc/spec says explicit to do it 
wrong, or at least partial wrong... :)

David was showing me some cool stuff you are able to do w/ a man-in-the-middle 
tool.
so the filed was required and we cut out the value from the submit request. so 
the value is null... but the field is still required.

I like to see david open a sepc issue on that and putting the url as a ref here 
in.

> Validation doesn't run for required fields if submitted value is null
> ---------------------------------------------------------------------
>
>                 Key: MYFACES-1467
>                 URL: http://issues.apache.org/jira/browse/MYFACES-1467
>             Project: MyFaces Core
>          Issue Type: Bug
>          Components: General
>    Affects Versions: 1.2.0-SNAPSHOT, 1.1.5-SNAPSHOT
>            Reporter: David Chandler
>         Assigned To: Matthias Weßendorf
>         Attachments: patch.txt
>
>
> A component with a required value will not fail validation as expected if the 
> submitted value is null. This issue is not seen normally because browsers 
> send the value for an empty text field as an empty string. That is, the POST 
> data for an empty field1 will contain the field name but no value, like 
> field1=&field2=something. However, if you use a man-in-the-middle proxy such 
> as Paros to remove "fieldname=" from the POST data, the submitted value will 
> be null. UIInput.validate() skips validation for null submitted values, but 
> since requiredness is also part of validation, the requiredness check gets 
> skipped, too.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to