mojarra icon indicating copy to clipboard operation
mojarra copied to clipboard

Published 20 hours ago • verified publisher icon eclipse-ee4j

Backport of CSP-related changes

Open jasondlee opened this issue 2 months ago • 3 comments

Backporting CSP-related changes from 5.x to the 4.0 branch.

jasondlee avatar Sep 05 '25 17:09 jasondlee

@arjantijms @BalusC Any thoughts on this?

jasondlee avatar Sep 30 '25 13:09 jasondlee

Thanks for backporting this, first off!

Secondly, out of all the changes implemented, I can't seem to find the one addressing the need of unsafe-eval because of the use of faces.util.chain(this,event,'mojarra.ab(....

Any chance of any of the PR participants to point it out?

Thanks in advance for your time!

fcarriedos avatar Oct 16 '25 16:10 fcarriedos

LGTM :) But why exactly is Issue5576IT disabled?

Have you already ran the entire 4.0 TCK on this branch? Did it all pass?

(sorry for late response, I was vacationing)

BalusC avatar Oct 18 '25 10:10 BalusC

Thanks for backporting this, first off!

Secondly, out of all the changes implemented, I can't seem to find the one addressing the need of unsafe-eval because of the use of faces.util.chain(this,event,'mojarra.ab(....

@fcarriedos Sorry. Work took me away from this for a bit. :) I thought I had ported everything. Can you point to what I missed? Definitely want to make sure we get it all. :)

jasondlee avatar Nov 18 '25 15:11 jasondlee