« Back

Announcement: Patches for Liferay Faces GA5

Company Blogs February 3, 2015 By Neil Griffin Staff

The Liferay Faces team is focussed on developing our new 4.2.5-GA6 and 3.2.5-GA6 releases as well as our new Liferay Faces Showcase demo.

But since not all projects will not have an opportunity to upgrade, we developed the following patches for our GA5 release:

Issue Description Version(s)
FACES-1513 Portlet incompatibility with PrimeFaces p:dataExporter and p:fileDownload 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5
FACES-1917 Security vulnerability with _jsfBridgeViewId, _facesViewIdRender, and _facesViewIdResource URL parameter values 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2006 BridgeFactoryFinderImpl not thread safe 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2007 PrimeFaces 5.1 portlet incompatibility with getFacesResource function in primefaces.js

Note that the following line must be added to each Facelet view in order to make use of the patch:

<h:outputScript name="primefaces-override.js" library="liferay-faces-2007-patch" />
3.2.4-ga5, 3.1.4-ga5
FACES-2043
JavaScript error 'TypeError: editorNode is null' occurs with liferay-ui:input-editor and Liferay Portal 6.2 EE SP5
3.2.4-ga5
FACES-2056 Liferay Faces Bridge does not support adding PrimeFaces 5.x scripts before the closing </body> tag of the portal page 3.2.4-ga5, 3.1.4-ga5
FACES-2061 Liferay Faces Bridge does not support PrimeFaces 4.x/5.x client side validation 3.2.4-ga5, 3.1.4-ga5
FACES-2343 Security vulnerability with accessing resources in JSF portlets 3.2.4-ga5, 3.1.4-ga5, 3.0.4-ga5, 3.0.4-legacy-ga5, 2.2.4-ga5, 2.1.4-ga5
FACES-2361 Security vulnerability with accessing a non-Faces view in JSF portlets 3.2.4.1-ga5, 3.1.4.1-ga5, 3.0.4.1-ga5, 3.0.4.1-legacy-ga5, 2.2.4.1-ga5, 2.1.4.1-ga5

Maven Dependencies

The following dependencies can be applied to each portlet WAR project. Version 3.2.4-ga5 is shown for example purposes. Please refer to the table above for patch applicability for each GA5 version of Liferay Faces.

<dependencies>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-1513-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-1917-lsv-5-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2006-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2007-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2043-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2056-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2061-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces.patches</groupId>
    <artifactId>liferay-faces-2343-lsv-71-patch</artifactId>
    <version>3.2.4-ga5</version>
  </dependency>
  <dependency>
    <groupId>com.liferay.faces</groupId>
    <artifactId>liferay-faces-bridge-api</artifactId>
    <version>3.2.4.1-ga5</version>
  </dependency>
</dependencies>

 

Threaded Replies Author Date
Thanks. Any idea about when 4.2.0-GA1 will be... Pius Onobhayedo February 13, 2015 1:39 AM
Our goal is end of Q1 / early Q2 2015. But we... Neil Griffin February 13, 2015 7:29 AM
Version 4.2.5-ga6 has been released:... Neil Griffin August 13, 2015 1:37 PM
[...] As we added support for new versions of... Anonymous March 31, 2016 3:18 PM
[...] As we added support for new versions of... Anonymous May 13, 2016 4:43 PM
[...] Liferay, Inc. has developed a patch jar... Anonymous September 2, 2016 5:47 PM

Thanks. Any idea about when 4.2.0-GA1 will be released?
Posted on 2/13/15 1:39 AM.
Our goal is end of Q1 / early Q2 2015. But we will probably release 4.2.0-m3 before then so that the community can provide us with more feedback.
Posted on 2/13/15 7:29 AM in reply to Pius Onobhayedo.
Version 4.2.5-ga6 has been released: https://www.liferay.com/web/neil.griffin/blog/-/blogs/announcement-liferay-faces­-4-x-3-x-2-x-ga6-released
Posted on 8/13/15 1:37 PM in reply to Pius Onobhayedo.
[...] As we added support for new versions of Liferay Portal and new versions of JSF, our single Git repository ended up with seven different branches. In order for developers to know which version... [...] Read More
Posted on 3/31/16 3:18 PM.
[...] As we added support for new versions of Liferay Portal and new versions of JSF, our single Git repository ended up with seven different branches. In order for developers to know which version... [...] Read More
Posted on 5/13/16 4:43 PM.
[...] Liferay, Inc. has developed a patch jar for FACES-2361. For more information, please refer to the updated blog post titled Announcement: Patches for Liferay Faces GA5. Sign in to vote. Flag Please... [...] Read More
Posted on 9/2/16 5:47 PM.