Top

Blog

PrimeFaces / Blog (Page 6)

PrimeFaces EL Injection – Issue 1152 / CVE-2017-1000486 / Cryptojacking Malware Injection PrimeFaces had an EL Injection Vulnerability in older versions till 5.2.21 / 5.3.8 / 6.0 – which was already fixed 2 years ago (02-2016). End of last year (12-2017), someone requested a CVE for that problem (https://github.com/primefaces/primefaces/issues/1152#issuecomment-221882773) and shorty after cryptojacking malware spotted on some PrimeFaces applications (https://forum.primefaces.org/viewtopic.php?f=3&t=53750&p=163369). How does the injection work? In PrimeFaces 5.2, the ValueExpression which targets the StreamedContent, was encrypted to the resource URL. ...

Dark vs Light, Choose your side! We're excited to announce Apollo , the all-new premium Angular CLI application template featuring the first time ever dark mode for the entire layout and PrimeNG components in addition to the light mode.   Dark vs Light For Apollo, we've tried something we've never done before and results are impressive. Entire PrimeNG UI components and the layout itself have two modes; light and dark. There is even a handy switch at the top right corner...

Second release candidate of the PrimeNG 5.2.0 is now available with over 45 enhancements, thank you everyone who took the first RC for a test run especially the new TurboTable. RC2 is mostly about maintenance however there are important improvements to TurboTable to bring radio-checkbox and shift key based selection. Here is the full changelog for all 47 improvements. In addition, we've reviewed all the pending PRs, thank you everyone who provided a PR to contribute. Let's...

PrimeFaces team is pleased to announce new updates to 6.1.x and 6.0.x branches.   New Features and Enhancements Added ui-reflow-headertext class to DataTable for Reflow mode When any ajax error happens, pfAjaxError will be triggered Upgrade JQuery UI to 1.12 (6.0.28) Defect Fixes Autocomplete multiple=true does not work with JSON object representations Colum priority responsive ignore flag visible Autocomplete: forceSelection chooses wrong item Cell edit selectCheckboxMenu: unable to select options The selected options of SelectCheckboxMenu are not saved on editable...

It is PrimeTime!!! PrimeTek is excited to announce the first release candidate for PrimeNG 5.2 featuring an all-new lightning fast Table component aka TurboTable, KeyFilter, ScrollPanel, Card along with over 50 enhancements to the suite. TurboTable Existing p-dataTable of PrimeNG is quite rich in terms of features however performance had always been an issue. We've tried all we could however it has not met our expectations as a result we've decided to create a new component called p-table...

PrimeTek is excited to announce the first release candidate of PrimeFaces 6.2 along with the new California premium application template. 6.2 provides brings over 400 enhancements, security patches, new components, accessibility enhancements and addons to the existing featureset. New Components Sidebar and InputGroups are the new additions to the suite. In addition, new p:autoUpdate enables autoUpdate functionality for any component. jQuery and Security jQuery 3.2.1 provides important security updates and performance improvements. jQuery of PrimeFaces has been updated from 2 to...

PrimeTek is proud to announce the new 1.4.0 for PrimeReact UI Component Suite for React. This version provides two new components, Card and KeyFilter. Here is the full changelog for the complete list of changes. Premium Templates In addition to the component suite, PrimeReact also offers 3 premium templates as create-react-app templates to get started in no time in style with Bootstrap and Google Material Design. Avalon Ultima Serenity These are also updated for 1.4.0 compatibility, if you have purchased...

PrimeFaces team is pleased to announce a new update to 6.1.x branch.   New Features and Enhancements Add GlobalFilter feature support to TreeTable Add dynamic attribute to AutoComplete Add dynamic attribute to SelectCheckboxMenu Add dynamic attribute to SelectOneMenu Improve column header text on Reflow Mode on DataTable Add beforeShow callback to Confirm component SelectOneButton: Improve styling Defect Fixes TextArea doesn't work correctly with p:resizable Focus is not moving to next component when tab key is pressed on AutoComplete Context...

PrimeReact 1.3.1 is now available featuring the migration to react-transition-group and a couple of fixes to the reported issues. Migrate to react-transition-group Calendar may reset date on update ExportCSV ignores headers in DataTable Calendar should consider props.disabled in shouldComponentUpdate Spinner binds invalid event ProgressSpinner css broken Autocomplete dropdown no longer working Download PrimeReact is an open source library distributed at NPM and free to use under MIT license....

This year we've gone all out! The biggest Prime Store sale ever gives you 25% OFF on All Premium Layout & Themes. Don't miss the opportunity to purchase these high quality premium application templates for PrimeFaces, PrimeNG and PrimeReact with exclusive discounts. Choose from over 18 High Quality Premium Application Templates starting from $19. Offer ends on 8th January morning EST. Happy new year!  ...