<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.9.2" -->
<rss version="0.92">
<channel>
	<title>Jakob Korherr&#039;s Blog</title>
	<link>http://www.jakobk.com</link>
	<description>A blog about Java, MyFaces and web development</description>
	<lastBuildDate>Tue, 22 Nov 2011 15:40:09 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>JSF value expression injection vulnerability</title>
		<description><![CDATA[A few days ago this issue was reported to Mojarra: http://java.net/jira/browse/JAVASERVERFACES-2247.
It basically states that it is possible in JSF 2 to perform ValueExpression injection when includeViewParams is set to true on a navigation case.
To illustrate this in a better way, I created an example project at apache-extras, which shows the vulnerability: http://code.google.com/a/apache-extras.org/p/jsf-includeviewparams-security-hole-example/
Use the following steps [...]]]></description>
		<link>http://www.jakobk.com/2011/11/jsf-value-expression-injection-vulnerability/</link>
			</item>
	<item>
		<title>Bachelor thesis about relative resource handler</title>
		<description><![CDATA[I am very happy to announce that I will write my bachelor thesis at the research group for industrial software (INSO) at Vienna University of Technology. The thesis will be about my work on the relative resource handler for JSF 2 [1].
Together with Marcus Büttner and Mark Struberg I will adapt the relative resource handler [...]]]></description>
		<link>http://www.jakobk.com/2011/11/bachelor-thesis-about-relative-resource-handler/</link>
			</item>
	<item>
		<title>MyFaces 2.1 is now trunk</title>
		<description><![CDATA[After a discussion about keeping our 2.0.x and 2.1.x branches in sync last week on the MyFaces dev mailing list, we decided to promote the 2.1.x branch to trunk. In addition, we created a 2.0.x maintenance branch.
MyFaces core 2.1.x is now here:
https://svn.apache.org/repos/asf/myfaces/core/trunk/
https://svn.apache.org/repos/asf/myfaces/shared/trunk/
or
https://svn.apache.org/repos/asf/myfaces/current21/

MyFaces core 2.0.x is now here:
https://svn.apache.org/repos/asf/myfaces/core/branches/2.0.x/
https://svn.apache.org/repos/asf/myfaces/shared/trunk_4.0.x/
or
https://svn.apache.org/repos/asf/myfaces/current20/
]]></description>
		<link>http://www.jakobk.com/2011/05/myfaces-2-1-is-now-trunk/</link>
			</item>
	<item>
		<title>JSF 2.2 Expert Group</title>
		<description><![CDATA[I just joined the JSF 2.2 (JSR 344) Expert Group. However, my request is not 100% done, I need to sign and fax the JSPA first (will do so next week).
I joined the EG, because some issues which were chosen for JSF 2.2, were originated by myself, like JAVASERVERFACES_SPEC_PUBLIC-976 or JAVASERVERFACES_SPEC_PUBLIC-947 (see other blog post). [...]]]></description>
		<link>http://www.jakobk.com/2011/04/jsf-2-2-expert-group/</link>
			</item>
	<item>
		<title>JSF 2.2 &#8211; spec issues with at least one vote</title>
		<description><![CDATA[Here is a list of all open JSF spec issues with at least one vote: http://java.net/jira/secure/IssueNavigator.jspa?mode=hide&#038;requestId=10514
Created via JIRA&#8217;s custom search query api.
]]></description>
		<link>http://www.jakobk.com/2011/04/jsf-2-2-spec-issues-with-at-least-one-vote/</link>
			</item>
	<item>
		<title>JSF 2.2 &#8211; Vote for your top 5 issues</title>
		<description><![CDATA[In the JSR-344 (= JSF 2.2) expert group kick-off meeting last wednesday in Vienna, Austria (which I was very glad to attend), the expert group agreed on letting everyone involved in JSF vote for their top 5 specification issues in the issue tracker. Ed Burns also announced this in this blog post.
There are currently about [...]]]></description>
		<link>http://www.jakobk.com/2011/04/jsf-2-2-vote-for-your-top-5-issues/</link>
			</item>
	<item>
		<title>How to wrap a ValueExpression in EL 1.0 and 2.2</title>
		<description><![CDATA[The problem
A new Class was introduced in the EL API 2.2: javax.el.ValueReference. In addition javax.el.ValueExpression now provides the following method:

public ValueReference getValueReference(ELContext context)
{
    return null;
}

This makes wrapping of a javax.el.ValueExpression (which is actually a very common thing in projects like MyFaces or OpenWebBeans) not really an easy task if you have to [...]]]></description>
		<link>http://www.jakobk.com/2010/12/how-to-wrap-a-valueexpression-in-el-1-0-and-2-2/</link>
			</item>
	<item>
		<title>Mac OS X search-styled JTextField</title>
		<description><![CDATA[Working on some design stuff for university, I found out a very convenient way to get a Mac OS X search-style textfield (like you find in _every_ Mac application) out of a standard JTextField.
Running a Swing application on Mac OS X Java, you normally use the Mac look-and-feel com.apple.laf.AquaLookAndFeel out of the box. The UI [...]]]></description>
		<link>http://www.jakobk.com/2010/12/mac-os-x-search-styled-jtextfield/</link>
			</item>
	<item>
		<title>JSR-314 extended expert group</title>
		<description><![CDATA[Since this week I am allowed to post to the jsr-314-open mailing list and thus considered a member of the JSR-314 extended expert group. I am very happy with this, because I can finally raise my concerns with JSF 2.0 and 2.1 and also join some interesting discussions.
I already started a thread about the targets [...]]]></description>
		<link>http://www.jakobk.com/2010/10/jsr-314-extended-expert-group/</link>
			</item>
	<item>
		<title>create annotation instances at runtime</title>
		<description><![CDATA[Yesterday I stumbled upon an easy way to create annotation instances at runtime: javax.enterprise.util.AnnotationLiteral
This util class from CDI (JSR-299) implements all standard methods (toString(), equals(), hashCode(), annotationType()) just like an annotation instance created by Java would. Thus there is no real difference between subclasses from this class and the annotations created by the JRE.
Here you [...]]]></description>
		<link>http://www.jakobk.com/2010/09/create-annotation-instances-at-runtime/</link>
			</item>
</channel>
</rss>

