JavaServer TM Faces Release Notes
Change Log

Specification Version: 1.2MR1
Implementation Version: 1.2_08 FCS
JavaServer(TM) Faces 1.2
JSF Community

We've added two new initialization parameters since the release of 1.2_07.

Paramter Name Description Default Value
com.sun.faces.enableViewStateIdRendering

If true, the view state hidden field will be rendered with both the id and name attributes having the value of "javax.faces.ViewState".

This is what the spec requires, however, if there are multiple forms within a view and the response content-type is XHTML, the result will be XHTML that will fail validation due to multiple ID attributes with the same value: javax.faces.ViewState. Setting this parameter to false will result in the ID attribute not being rendered. Keep in mind however, that doing this may break integration with AJAX frameworks that get the state field via ID.

See issue 433 for details.

true
com.sun.faces.enableScriptsInAttributeValues

If false, attribute values with javascript: or script: will not be rendered within attribute values to prevent potential XSS attacks.

true

Issues Resolved In This Release

ID Type Pri Plat Owner State Resolution Summary
433 ENHANCEMENT P3 All rlubke RESOLVED FIXED Invalid XHTML is outputted by h:form, there are multiple elements with id="javax.faces.ViewState" when only 1 is allowed.
668 DEFECT P3 All rlubke RESOLVED FIXED ViewTag.getComponentType does not throw a useful exception
670 DEFECT P2 All rlubke RESOLVED FIXED WebappLifecycleListener incorrectly accesses the applicationAssociate ivar instead of through the getter.
672 DEFECT P3 All rlubke RESOLVED FIXED Managed properties set via expressions are having null evaluations coerced
673 DEFECT P3 All rlubke RESOLVED FIXED Review code to reduce the use of private request scoped attributes.
674 ENHANCEMENT P3 All rlubke RESOLVED FIXED Improve efficiency of Writer usage
675 DEFECT P3 All rlubke RESOLVED FIXED SWF 2.0-m2, Glassfish, JSF 1.2 yields NPE
676 ENHANCEMENT P3 All rlubke RESOLVED FIXED Replace HtmlUtils use of String.charAt() with String.getChars() instead.
679 DEFECT P2 All rlubke RESOLVED FIXED API SelectItemIterator doesn't support Collections - only Lists
682 DEFECT P3 Macintos rlubke RESOLVED FIXED The type of the first element of a UISelectMany is taken to be the type of every element
683 DEFECT P2 All rlubke RESOLVED FIXED Under certain circumstances, Renderers can be registered with the incorrect RenderKit
684 DEFECT P2 All jdlee RESOLVED FIXED Make the generated JSP tags are non-final
685 DEFECT P2 All rlubke RESOLVED FIXED JSF NPE in UIComponentClassicTagBase
689 PATCH P3 All rlubke RESOLVED FIXED Navigation Matching Bug
691 DEFECT P2 Macintos jdlee RESOLVED FIXED <h:commandLink> does not work in Safari
699 DEFECT P2 All rlubke RESOLVED FIXED Value of prependId not included in saved form state
700 DEFECT P2 All rlubke RESOLVED FIXED InjectionProviderFactory only scans the first injectionprovider service file
702 DEFECT P2 All rlubke RESOLVED FIXED BeanManager may be null in WebappLifecycleListener.handleAttributeEvent()
704 DEFECT P2 All rlubke RESOLVED FIXED Chinese Char entities Auto-escaped by h:outputText and other components