Announcement: Patches for Liferay Faces GA5

The Liferay Faces team is focussed on developing our new 4.2.5-GA6 and 3.2.5-GA6 releases as well as our new Liferay Faces Showcase demo.

But since not all projects will not have an opportunity to upgrade, we developed the following patches for our GA5 release:

Issue Description Version(s)
FACES-1513 Portlet incompatibility with PrimeFaces p:dataExporter and p:fileDownload 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5
FACES-1917 Security vulnerability with _jsfBridgeViewId, _facesViewIdRender, and _facesViewIdResource URL parameter values 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2006 BridgeFactoryFinderImpl not thread safe 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2007 PrimeFaces 5.1 portlet incompatibility with getFacesResource function in primefaces.js

Note that the following line must be added to each Facelet view in order to make use of the patch:

<h:outputScript name="primefaces-override.js" library="liferay-faces-2007-patch" />
3.2.4-ga5, 3.1.4-ga5
FACES-2043
JavaScript error 'TypeError: editorNode is null' occurs with liferay-ui:input-editor and Liferay Portal 6.2 EE SP5
3.2.4-ga5
FACES-2056 Liferay Faces Bridge does not support adding PrimeFaces 5.x scripts before the closing </body> tag of the portal page 3.2.4-ga5, 3.1.4-ga5
FACES-2061 Liferay Faces Bridge does not support PrimeFaces 4.x/5.x client side validation 3.2.4-ga5, 3.1.4-ga5
FACES-2343 Security vulnerability with accessing resources in JSF portlets 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2361 Security vulnerability with accessing a non-Faces view in JSF portlets 3.2.4.1-ga5, 3.1.4.1-ga5, 3.0.4.1-ga5, 3.0.4.1-legacy-ga5, 2.2.4.1-ga5, 2.1.4.1-ga5

Maven Dependencies

The following dependencies can be applied to each portlet WAR project. Version 3.2.4-ga5 is shown for example purposes. Please refer to the table above for patch applicability for each GA5 version of Liferay Faces.

<dependencies>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-1513-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-1917-lsv-5-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2006-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2007-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2043-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2056-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2061-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2343-lsv-71-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces</groupId>
    <artifactId>liferay-faces-bridge-api</artifactId>
    <version>3.2.4.1-ga5</version>
  </dependency>
</dependencies>

 

Blogs
Thanks. Any idea about when 4.2.0-GA1 will be released?
[...] As we added support for new versions of Liferay Portal and new versions of JSF, our single Git repository ended up with seven different branches. In order for developers to know which version... [...] Read More
[...] As we added support for new versions of Liferay Portal and new versions of JSF, our single Git repository ended up with seven different branches. In order for developers to know which version... [...] Read More