[
https://issues.apache.org/jira/browse/MYFACES-3719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13649629#comment-13649629
]
dennis hoersch commented on MYFACES-3719:
-----------------------------------------
(
With a small change in HtmlButtonRendererBase.decode() it is possible to
prevent queuing events of disabled buttons:
public void decode(FacesContext facesContext, UIComponent uiComponent)
{
if ( !isReset(uiComponent) &&
isSubmitted(facesContext, uiComponent) &&
!isDisabled(facesContext, uiComponent))
{
uiComponent.queueEvent(new ActionEvent(uiComponent));
....
)
> Executing action of a disabled Button
> -------------------------------------
>
> Key: MYFACES-3719
> URL: https://issues.apache.org/jira/browse/MYFACES-3719
> Project: MyFaces Core
> Issue Type: Bug
> Affects Versions: 2.1.11
> Reporter: dennis hoersch
>
> I have a commandButton with a specific action which is disabled. The button
> is rendered with a disabled attribute and gets a bit different onclick script.
> Problem is, when the user removes the disabled and onclick attributes, with
> for example Firebug, it is possible to click the button. And JSF does not
> prevent the action from being executed.
> I expected that the execution is prevented also on server-side.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
