Uploaded image for project: 'RichFaces'
  1. RichFaces
  2. RF-12813

rich:panelMenuItem executes action even if disabled attribute evaluates to true

    Details

    • Sprint:
      4.3.5 Sprint 1

      Description

      org.richfaces.renderkit.html.PanelMenuItemRenderer#doDecode does not check 'disabled' attribute (how usually do other components before executing action) which may cause security issues.

      Initially reported on:
      http://stackoverflow.com/questions/15130807/richfaces-panelmenuitem-reevaluating-disabled-not-working

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                bleathem Brian Leathem
                Reporter:
                a.zhemoytuk Andrey Zhemoytuk
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 30 minutes
                  30m
                  Remaining:
                  Remaining Estimate - 30 minutes
                  30m
                  Logged:
                  Time Spent - Not Specified
                  Not Specified