Blogs

Announcement: Patches for Liferay Faces GA5

Neil Griffin

February 03, 2015

A Minute Read

The Liferay Faces team is focussed on developing our new 4.2.5-GA6 and 3.2.5-GA6 releases as well as our new Liferay Faces Showcase demo.

But since not all projects will not have an opportunity to upgrade, we developed the following patches for our GA5 release:

Issue	Description	Version(s)
FACES-1513	Portlet incompatibility with PrimeFaces p:dataExporter and p:fileDownload	3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5
FACES-1917	Security vulnerability with _jsfBridgeViewId, _facesViewIdRender, and _facesViewIdResource URL parameter values	3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2006	BridgeFactoryFinderImpl not thread safe	3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2007	PrimeFaces 5.1 portlet incompatibility with getFacesResource function in primefaces.js Note that the following line must be added to each Facelet view in order to make use of the patch: <h:outputScript name="primefaces-override.js" library="liferay-faces-2007-patch" />	3.2.4-ga5, 3.1.4-ga5
FACES-2043	JavaScript error 'TypeError: editorNode is null' occurs with liferay-ui:input-editor and Liferay Portal 6.2 EE SP5	3.2.4-ga5
FACES-2056	Liferay Faces Bridge does not support adding PrimeFaces 5.x scripts before the closing </body> tag of the portal page	3.2.4-ga5, 3.1.4-ga5
FACES-2061	Liferay Faces Bridge does not support PrimeFaces 4.x/5.x client side validation	3.2.4-ga5, 3.1.4-ga5
FACES-2343	Security vulnerability with accessing resources in JSF portlets	3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2361	Security vulnerability with accessing a non-Faces view in JSF portlets	3.2.4.1-ga5, 3.1.4.1-ga5, 3.0.4.1-ga5, 3.0.4.1-legacy-ga5, 2.2.4.1-ga5, 2.1.4.1-ga5

Maven Dependencies

The following dependencies can be applied to each portlet WAR project. Version 3.2.4-ga5 is shown for example purposes. Please refer to the table above for patch applicability for each GA5 version of Liferay Faces.

<dependencies>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-1513-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-1917-lsv-5-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2006-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2007-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2043-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2056-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2061-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2343-lsv-71-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces</groupId>
    <artifactId>liferay-faces-bridge-api</artifactId>
    <version>3.2.4.1-ga5</version>
  </dependency>
</dependencies>

5 Comments

Please sign in to comment.

Thanks. Any idea about when 4.2.0-GA1 will be released?

Please sign in to reply.

Our goal is end of Q1 / early Q2 2015. But we will probably release 4.2.0-m3 before then so that the community can provide us with more feedback.

Please sign in to reply.

Version 4.2.5-ga6 has been released: https://www.liferay.com/web/neil.griffin/blog/-/blogs/announcement-liferay-faces-4-x-3-x-2-x-ga6-released

Please sign in to reply.

[...] As we added support for new versions of Liferay Portal and new versions of JSF, our single Git repository ended up with seven different branches. In order for developers to know which version... [...] Read More

Please sign in to reply.