ICEfaces
  1. ICEfaces
  2. ICE-11435

Constrain partial requests to HTTP POST only

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: EE-3.3.0.GA_P05, 4.3
    • Fix Version/s: EE-3.3.0.GA_P06, EE-4.3.0.GA
    • Component/s: Framework
    • Labels:
      None
    • Environment:
      ICEfaces

      Description

      Constrain partial requests to HTTP POST only to improve the security of the framework.
      JSF does not enforce in any way the type of HTTP request used, but it makes sense to only have HTTP POST for partial requests since they are the ones that change the state of the view, session, component and app.

        Activity

          People

          • Assignee:
            Mircea Toma
            Reporter:
            Mircea Toma
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: