Thanks for your response. Which is a good class to set the first breakpoint in, from which I could follow out the rest of the processing? Would it be in the generated servlet, in some kind of interceptor class (if using JBoss), the Faces Servlet, or where?
If there's absolutely no information stored on the server, then (assuming somebody could unencrypt the content of those fields) technically somebody could alter the hidden field values, resubmit the form and see something different from what they expected, right? With server-side state-saving, how is the information passed between the client and the server? (cookies, URL, hidden form fields?) I understand I'm asking implementation details that I don't "necessarily" need to know in order to use JSF, but I nonetheless need to understand the concepts. I think it's unwise for a developer to not know (at least on a conceptual level) what's going on the in framework or tool that they're using. Not to mention the fact that developers often (if not VERY often) need to justify these development choices to others within their organizations. Thanks. -- View this message in context: http://www.nabble.com/Understanding-JSF-MyFaces-tf2782475.html#a7763777 Sent from the MyFaces - Users mailing list archive at Nabble.com.
