You are viewing a plain text version of this content. The canonical link for it is here.
Posted to announce@apache.org by Udo Schnurpfeil <lo...@apache.org> on 2013/08/12 10:11:50 UTC

[ANNOUNCE] Apache Tobago 2.0.0-alpha-1

The Apache MyFaces team is pleased to announce the release of Apache
Tobago 2.0.0-alpha-1.

Apache Tobago is a component library for JSF.

-----------------
Main new features
-----------------

Security
--------

* Supports Content Security Policy (SCP) [1] to prevent cross-site
scripting (XSS) and related attacks. In short: The HTML page doesn't
contain any JavaScript or CSS information. All allowed sources for
JavaScript, CSS and other resources have to be declared in special header.
If you have own renderers or own JavaScript in your application, this
code also needs to support SCP, to use this feature.
* Prevent for frame attacks

Standards
---------

* Requires JSF 2.0, 2.1 or 2.2 (no longer supports JSF 1.1 and 1.2)
* Replaces Facelets 1.1 with JSF Facelets 2.0

Components
----------

* <tc:tree> and UITree extends now UIData
* Tree table: use a <tc:columnNode> inside of a <tc:sheet>
* Dynamic default-buttons in virtual forms
* Support of HTML5 data attributes
* Other HTML5 features
* Reimplementation of the input suggest control

-------
Changes
-------

You can find a migration how-to on the site:
http://myfaces.apache.org/tobago/migration-2.0.html

Please check the release notes at
http://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310273&styleName=Html&version=12321874
for a full list of the changes.

---------------------------
Known limitations and bugs:
---------------------------

This is an alpha-release, please don't use it in production environment.


For more information about Apache Tobago, please visit
http://myfaces.apache.org/tobago/.

Have fun,
-The MyFaces team

[1] http://www.w3.org/TR/CSP/