ICEfaces
  1. ICEfaces
  2. ICE-6947

Improve new ACE component security with JSONBuilder

          Details

          • Type: Improvement Improvement
          • Status: Closed
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: 2.0.2
          • Fix Version/s: 3.3
          • Component/s: ACE-Components
          • Labels:
            None
          • Environment:
            ACE
          • Assignee Priority:
            P1

            Description

            The new ACE components use ResponseWriter.write(String) to make un-escaped writes with manually quoted javascript values. It would be better to use JSONBuilder to handle the escaping automatically, and reduce the number of small text nodes we populate the DOM with.

              Issue Links

              depends on

              Improvement - An improvement or enhancement to an existing feature or task. ICE-6978 Augment JSONBuilder to write whole function calls

              • Major - Major loss of function.
              • Closed

                Activity

                  People

                  • Assignee:
                    Nils Lundquist
                    Reporter:
                    Mark Collette
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: