jsf-2.2

JSF refreshing list via Ajax incorrectly

无人久伴 提交于 2020-06-01 06:15:17
问题 I am trying to migrate some functionality from JQuery to JSF and I am getting strange results. Basically it is a page where you can navigate links (imagine like a Windows Explorer on the Web). Folders have a link and leafs don't. To construct this, it is used a private List<Element> list; , which is refreshed accordingly. So when the user clicks on a "folder", a new list is created with the contents of that folder. The problem is that I am getting strange results. Sometimes I navigate a link

IBM AppScan Struts2 issue reported on a JSF 2.2 & Primefaces - JBOSS 7.2 EAP

旧街凉风 提交于 2020-05-21 05:56:19
问题 We recently received result from IBM AppScan DAST and some of the result don't make much senses. The first 2 High issue shows the application as being Struts2 which is incorrect since it a JSF 2.2 , Primefaces 7.0.9 running on JBOSS EASP 7.2 (JSF version 2.3). I don't even seen Struts in JBOSS modules / jars. 1.High -- Apache Struts2 Remote Code Execution Risk(s): It is possible to run remote commands on the web server. This usually means complete compromise of the server and its contents Fix

IBM AppScan - Port Listener Command Injection - JSF 2.2 & Primefaces - JBOSS 7.2 EAP

别等时光非礼了梦想. 提交于 2020-05-17 08:49:22
问题 Orginal Post IBM AppScan We recently received result from IBM AppScan DAST and some of the result don't make much senses. Parameter: **javax.faces.source** Risk(s): It is possible to run remote commands on the web server. This usually means complete compromise of the server and its contents Fix: Set the "uri" attribute of the "domain" entity in the clientaccesspolicy.xml file to include specific domain names instead of any domain. The following changes were applied to the original request:

IBM AppScan - Java Deserialization Code Execution - JSF 2.2 & Primefaces - JBOSS 7.2 EAP

自作多情 提交于 2020-05-16 22:34:10
问题 Orginal Post IBM AppScan We recently received result from IBM AppScan DAST and some of the result don't make much senses. Java Deserialization Code Execution Parameter: **javax.faces.ViewState** Risk(s): It is possible to run remote commands on the web server. This usually means complete compromise of the server and its contents The following changes were applied to the original request: Set the value of the parameter 'javax.faces.ViewState' to XXX POST /**/processitem.xhtml HTTP/1.1 User

IBM AppScan - Blind SQL Injection (Time Based) - JSF 2.2 & Primefaces - JBOSS 7.2 EAP

五迷三道 提交于 2020-05-15 08:07:31
问题 Orginal Post IBM AppScan We recently received result from IBM AppScan DAST and some of the result don't make much senses. High -- Blind SQL Injection (Time Based) Parameter: form:propertyTree:0:j_idt126 Risk(s): It is possible to view, modify or delete database entries and tables Fix: Review possible solutions for hazardous character injection 2nd case for Blind SQL Injection (Time Based) URL: https://***/javax.faces.resource/components.js.xhtml Parameter: v Risk(s): It is possible to view,

Primefaces dataTable: Is it possible to conditionally show a button? [duplicate]

心已入冬 提交于 2020-02-25 04:34:26
问题 This question already has answers here : Conditionally displaying JSF components (2 answers) Closed 3 years ago . I have a dataTable and there is a button in the last column. Depending on the data in the first column, I need the button to be either a simple button or a splitButton (offering more actions). Is there a way to achieve this ? My dataTable: <p:column headerText="id"> <h:outputText value="#{myvar.id}" /> </p:column> <p:column> <p:splitButton value="View" actionListener="#{bean

Reading and writing a XML file in JSF

一世执手 提交于 2020-02-04 07:34:46
问题 I found nothing online about how to read/write an XML document in JSF. I know something in JSP along with JSTL using XALAN. For example, The following XML file is defined under /WEB-INF . <?xml version="1.0" encoding="UTF-8"?> <fruits> <fruit> <name>Orange</name> <price>10</price> </fruit> <fruit> <name>Banana</name> <price>20</price> </fruit> <fruit> <name>Apple</name> <price>30</price> </fruit> </fruits> This document can be read in JSP like the following. <%@ taglib prefix="c" uri="http:/

How to use Google Guice with Richfaces 4.3.7

喜夏-厌秋 提交于 2020-01-25 05:28:07
问题 I'm programming a web app which uses richfaces 4.3.7 and google guice 4.0. The problem is that richfaces using guava 18 und google guice using guava 16, this results with the following Exception: java.lang.RuntimeException: java.lang.IllegalAccessError: tried to access method com.google.common.collect.MapMaker.makeComputingMap(Lcom/google/common/base/Function;)Ljava/util/concurrent/ConcurrentMap; from class org.richfaces.resource.ResourceLibraryFactoryImpl Caused by: java.lang

How to use Google Guice with Richfaces 4.3.7

天大地大妈咪最大 提交于 2020-01-25 05:28:06
问题 I'm programming a web app which uses richfaces 4.3.7 and google guice 4.0. The problem is that richfaces using guava 18 und google guice using guava 16, this results with the following Exception: java.lang.RuntimeException: java.lang.IllegalAccessError: tried to access method com.google.common.collect.MapMaker.makeComputingMap(Lcom/google/common/base/Function;)Ljava/util/concurrent/ConcurrentMap; from class org.richfaces.resource.ResourceLibraryFactoryImpl Caused by: java.lang

CDI beans injection

旧城冷巷雨未停 提交于 2020-01-21 19:16:07
问题 Is this a correct approach to inject @ApplicationScoped bean in @SessionScoped bean? will this lead my application scoped bean to be stored in the session of every user? I have an application scoped bean that contains some values we share among all the system users, and now I need to get that values within a method in a session bean. 回答1: Injecting a bean of the same or a broader scope in another bean is completely legal and correct either in JSF or CDI beans, like the example you provided.