<protected-views><url-pattern> does not work as per Servlet 12.1 and is compared against JSF view ID instead of request URL

[glassfishrobot]

Trigger: http://stackoverflow.com/q/29104597/157882

Problem 1: does not work as per Servlet 12.1. It does merely an exact match and wildcards are not supported. It's also nowhere in JSF 2.2 specification documented how exactly this should be used in faces-config.xml.

Problem 2: During generating action URL, is not compared against final action URL, but against JSF view ID, causing failures when there's a virtual URL based mapping like .faces or /faces/.

Another non-related problem 3: the current approach is inefficient. It's for every single view checked on a per-request basis while it could easily be (lazily) checked and stored in view/facelet metadata on an application wide basis.

Affected Versions

[2.2]

[glassfishrobot]

Reported by @BalusC

[glassfishrobot]

This issue was imported from java.net JIRA JAVASERVERFACES_SPEC_PUBLIC-1369

[glassfishrobot]

Closing this as this issue is migrated to jakartaee/faces#1369