myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matthias Weßendorf (JIRA) <...@myfaces.apache.org>
Subject [jira] Commented: (MYFACES-1467) Validation doesn't run for required fields if submitted value is null
Date Sat, 14 Oct 2006 16:25:36 GMT
    [ http://issues.apache.org/jira/browse/MYFACES-1467?page=comments#action_12442311 ] 
            
Matthias Weßendorf commented on MYFACES-1467:
---------------------------------------------

Cagatay,

it's not that much important, how the RI behaves... if there is the same bug, I am fine with
that :)
But... why is that bug there? Because the javadoc/spec says explicit to do it wrong, or at
least partial wrong... :)

David was showing me some cool stuff you are able to do w/ a man-in-the-middle tool.
so the filed was required and we cut out the value from the submit request. so the value is
null... but the field is still required.

I like to see david open a sepc issue on that and putting the url as a ref here in.

> Validation doesn't run for required fields if submitted value is null
> ---------------------------------------------------------------------
>
>                 Key: MYFACES-1467
>                 URL: http://issues.apache.org/jira/browse/MYFACES-1467
>             Project: MyFaces Core
>          Issue Type: Bug
>          Components: General
>    Affects Versions: 1.2.0-SNAPSHOT, 1.1.5-SNAPSHOT
>            Reporter: David Chandler
>         Assigned To: Matthias Weßendorf
>         Attachments: patch.txt
>
>
> A component with a required value will not fail validation as expected if the submitted
value is null. This issue is not seen normally because browsers send the value for an empty
text field as an empty string. That is, the POST data for an empty field1 will contain the
field name but no value, like field1=&field2=something. However, if you use a man-in-the-middle
proxy such as Paros to remove "fieldname=" from the POST data, the submitted value will be
null. UIInput.validate() skips validation for null submitted values, but since requiredness
is also part of validation, the requiredness check gets skipped, too.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

Mime
View raw message