jsr344-experts@javaserverfaces-spec-public.java.net

[jsr344-experts] Re: [869-CSRF] Proposal

From: Ed Burns <edward.burns_at_oracle.com>
Date: Tue, 26 Jul 2011 11:02:47 -0700

>>>>> On Tue, 26 Jul 2011 13:24:07 -0400, Neil Griffin <neil.griffin_at_portletfaces.org> said:

NG> I just wanted to answer Ed's question below: Yes, the portlet bridge
NG> can use the ViewHandlerWrapper if necessary to fortify the
NG> ViewHandler#getActionURL(String) method. Also
NG> ExternalContext#encodeActionURL(String) can be fortified as well.

Thanks, I've added this comment into the proposal, incrementing the
version to 20110726.

Ed

-- 
| edward.burns_at_oracle.com | office: +1 407 458 0017
| homepage:               | http://ridingthecrest.com/