learnjsf.com http://learnjsf.com/wp Mon, 23 Jun 2008 14:15:01 +0000 http://backend.userland.com/rss092 en JSF Welcome File Gotcha’ When using web.xml's welcome file capability to specify your application home page, make sure your editor (hint: Eclipse Web Tools?) doesn't put in a leading slash. Right: <welcome-file-list> <welcome-file>homePage.jsf</welcome-file> </welcome-file-list> Wrong: <welcome-file-list> <welcome-file>/homePage.jsf</welcome-file> </welcome-file-list> The leading slash in the second example will trip up JSF such that when you submit a form on the home page, it will ... http://learnjsf.com/wp/2006/12/19/jsf-welcome-file-gotcha/ MyFaces Requiredness Checking Bug Resolved After *much* discussion, MYFACES-1467 has been resolved (see previous post). The patch did not break the Sun TCK as originally thought, so it went in as UIInput.java version 478342 on 11/22/06. /dmc http://learnjsf.com/wp/2006/12/19/myfaces-requiredness-checking-bug-resolved/ Hacking JSF Requiredness Checking MyFaces committer Matthias Weßendorf and I spent a few minutes this afternoon at ApacheCon confirming what I suspected about validation of required values in JSF. Normally, if you leave a required field empty, it will show up as an empty string and JSF will properly check for requiredness. But if, ... http://learnjsf.com/wp/2006/10/14/hacking-jsf-requiredness-checking/ Securing MyFaces Applications Against the OWASP Top Ten My ApacheCon presentation is now available in the Security section of this site. http://learnjsf.com/wp/2006/10/11/securing-myfaces-applications-against-the-owasp-top-ten-2/ Using Tomahawk Tree2 Component in a Portal To run Tree2 with client-side expansion, you need JavaScript in the page <HEAD>. Normally, this gets added by the Tomahawk ExtensionsFilter. This doesn't work in a portal, however, because servlet filters don't run in a portal. There are some patches in MYFACES-434 (portlet filter) you may be able to use, ... http://learnjsf.com/wp/2006/09/26/using-tomahawk-tree2-component-in-a-portal/ Securing MyFaces Against the OWASP Top Ten Presentation for ApacheCon US 2006 http://learnjsf.com/wp/2006/09/15/securing-myfaces-against-the-owasp-top-ten/ JSF Trick: Invoking an Action Method on an Item in a Datatable Suppose you want to create a table of items and enable one or more action links for each item; for example, a list of files with a "check out" and "delete" link next to each. The usual approach is to create a java.faces.model.ListDataModel in your backing bean and call its ... http://learnjsf.com/wp/2006/09/09/jsf-trick-invoking-an-action-method-on-an-item-in-a-datatable/ JSF for Struts Developers Online Registration Now Open Just a quick note for those who have been waiting for online registration for my upcoming class on JSF for Struts Developers in Atlanta. In order to give every student the best possible learning experience, registration is limited to 15 students. http://learnjsf.com/wp/2006/08/20/jsf-for-struts-developers-online-registration-now-open/ Securing MyFaces Applications Against the OWASP Top Ten My presentation on this subject has been selected for the upcoming ApacheCon US 2006! If you'd like to be a technical reviewer beforehand, please e-mail me at the address on the Consulting menu above. See you there! The JavaServer Faces (JSF) API is an excellent foundation for building secure Web applications ... http://learnjsf.com/wp/2006/08/18/securing-myfaces-applications-against-the-owasp-top-ten/ Disable Browser Caching in JSF Browser caching of page content has negative security implications when your application runs on shared terminals (like the public library). You can turn it off with this ... http://learnjsf.com/wp/2006/08/08/disable-browser-caching-in-jsf/