myfaces-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From lu4...@apache.org
Subject svn commit: r778948 - /myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
Date Wed, 27 May 2009 01:14:09 GMT
Author: lu4242
Date: Wed May 27 01:14:09 2009
New Revision: 778948

URL: http://svn.apache.org/viewvc?rev=778948&view=rev
Log:
TOMAHAWK-1391 Inserting <!-- MYFACES JAVASCRIPT --> into HTML output is potential security
problem (and does not do anything!)

Modified:
    myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java

Modified: myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
URL: http://svn.apache.org/viewvc/myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java?rev=778948&r1=778947&r2=778948&view=diff
==============================================================================
--- myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
(original)
+++ myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/util/ExtensionsPhaseListener.java
Wed May 27 01:14:09 2009
@@ -108,7 +108,8 @@
         if(responseWriter!=null)
             facesContext.setResponseWriter(responseWriter);
 
-        return "<!-- MYFACES JAVASCRIPT -->\n"+writerWrapper.toString()+"\n";
+        //return "<!-- MYFACES JAVASCRIPT -->\n"+writerWrapper.toString()+"\n";
+        return writerWrapper.toString();
     }
 
     /**In case of StreamingAddResource and a documentBody-Tag, this method will be called
with the



Mime
View raw message