You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@myfaces.apache.org by lu...@apache.org on 2009/05/27 03:14:09 UTC
svn commit: r778948 -
/myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
Author: lu4242
Date: Wed May 27 01:14:09 2009
New Revision: 778948
URL: http://svn.apache.org/viewvc?rev=778948&view=rev
Log:
TOMAHAWK-1391 Inserting <!-- MYFACES JAVASCRIPT --> into HTML output is potential security problem (and does not do anything!)
Modified:
myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
Modified: myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
URL: http://svn.apache.org/viewvc/myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java?rev=778948&r1=778947&r2=778948&view=diff
==============================================================================
--- myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java (original)
+++ myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java Wed May 27 01:14:09 2009
@@ -108,7 +108,8 @@
if(responseWriter!=null)
facesContext.setResponseWriter(responseWriter);
- return "<!-- MYFACES JAVASCRIPT -->\n"+writerWrapper.toString()+"\n";
+ //return "<!-- MYFACES JAVASCRIPT -->\n"+writerWrapper.toString()+"\n";
+ return writerWrapper.toString();
}
/**In case of StreamingAddResource and a documentBody-Tag, this method will be called with the