Learn about the JSF ViewState object and discover how it protects the web application from harm.
- [Instructor] It's not very common…for a web application framework to have security woven…into it the way JSF does.…Security in JSF is not separate module or an R to sort.…It's fundamental to the way JSF operates.…Let's start with the JSF ViewState Object.…It's an object that starts out with a record…of the state of all the components in the page view tree,…basically all the HTML components…that are rendered to the browser.…So, take for example when we enter a value…into our input text area here,…it's recorded into the ViewState object.…
We have two options for storing the ViewState.…JSF can be configured to store the ViewState…on the server side, away from prying eyes…but with a slight performance overhead…in terms of memory consumption.…Or we could have a ViewState serialized…into the JSF page itself as a hidden form field.…Let's save it on the server first,…which is highly recommended.…For that, we go to the web.xml file.…The parameter, javax.faces.state_saving_method…is what we need to configure.…
Here, I've already configured it to server.…
- Why use JSF?
- How JSF works
- Using managed beans in JSF
- Building a JSF page using Facelets
- Using Ajax support in JSF
- Processing complex data with JSF converters
- Security in JSF
- JSF and third-party component libraries
Skill Level Beginner
1. Web Application Development in JavaEE
2. Build Your First JSF Page
3. Use Managed Beans in JSF
4. Build a JSF Page Using Facelets
5. Use Ajax Support in JSF
6. Process Complex Data with JSF Converters
7. Protect Your Application with JSF Validation
8. Security in JSF
9. Combine JSF with Other Frameworks
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.