You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@myfaces.apache.org by "Mark Struberg (JIRA)" <de...@myfaces.apache.org> on 2012/05/14 12:42:48 UTC

[jira] [Created] (EXTCDI-288) [CSWH] WindowContextConfig#isUnknownWindowIdsAllowed() should default to "true"

Mark Struberg created EXTCDI-288:
------------------------------------

             Summary: [CSWH] WindowContextConfig#isUnknownWindowIdsAllowed() should default to "true"
                 Key: EXTCDI-288
                 URL: https://issues.apache.org/jira/browse/EXTCDI-288
             Project: MyFaces CODI
          Issue Type: Improvement
          Components: JEE-JSF20-Module
    Affects Versions: 1.0.5
            Reporter: Mark Struberg
            Assignee: Mark Struberg


If we like to support <a target="xyz"...> then we need to allow managing of unknownWindowIds. The windowId is set by the window.name of the browser tab. This will also allow mixed operation mode with other frameworks which utilize the window.name for browser tab detection. 

This mode is also *essential* for EARs and portlets!

Please note that this will _not_ introduce a security problem as the windowId is just a sub-context of the session (which is well protected already). 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (EXTCDI-288) [CSWH] WindowContextConfig#isUnknownWindowIdsAllowed() should default to "true"

Posted by "Mark Struberg (JIRA)" <de...@myfaces.apache.org>.
     [ https://issues.apache.org/jira/browse/EXTCDI-288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mark Struberg resolved EXTCDI-288.
----------------------------------

       Resolution: Fixed
    Fix Version/s: 1.0.6
    
> [CSWH] WindowContextConfig#isUnknownWindowIdsAllowed() should default to "true"
> -------------------------------------------------------------------------------
>
>                 Key: EXTCDI-288
>                 URL: https://issues.apache.org/jira/browse/EXTCDI-288
>             Project: MyFaces CODI
>          Issue Type: Improvement
>          Components: JEE-JSF20-Module
>    Affects Versions: 1.0.5
>            Reporter: Mark Struberg
>            Assignee: Mark Struberg
>             Fix For: 1.0.6
>
>
> If we like to support <a target="xyz"...> then we need to allow managing of unknownWindowIds. The windowId is set by the window.name of the browser tab. This will also allow mixed operation mode with other frameworks which utilize the window.name for browser tab detection. 
> This mode is also *essential* for EARs and portlets!
> Please note that this will _not_ introduce a security problem as the windowId is just a sub-context of the session (which is well protected already). 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira