There is a validation-check in selectOneMenu to disallow id's which are not in the selectItem-list.
regards, Martin On 9/11/06, Thorbjørn Ravn Andersen <[EMAIL PROTECTED]> wrote:
Gerald Müllan skrev den 11-09-2006 12:25: > > The value of the selectOneMenu in the backend will then include the id > of the entity. Just being curious. Will an malicious attempt to set the id to a value NOT in the list given (by handcrafting a response) be allowed to update the property in the bean, or will it be rejected as being invalid? -- Thorbjørn
-- http://www.irian.at Your JSF powerhouse - JSF Consulting, Development and Courses in English and German Professional Support for Apache MyFaces
