www-announce mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Udo Schnurpfeil <lof...@apache.org>
Subject [ANNOUNCE] Apache Tobago 2.0.0-alpha-1
Date Mon, 12 Aug 2013 08:11:50 GMT
The Apache MyFaces team is pleased to announce the release of Apache
Tobago 2.0.0-alpha-1.

Apache Tobago is a component library for JSF.

Main new features


* Supports Content Security Policy (SCP) [1] to prevent cross-site
scripting (XSS) and related attacks. In short: The HTML page doesn't
contain any JavaScript or CSS information. All allowed sources for
JavaScript, CSS and other resources have to be declared in special header.
If you have own renderers or own JavaScript in your application, this
code also needs to support SCP, to use this feature.
* Prevent for frame attacks


* Requires JSF 2.0, 2.1 or 2.2 (no longer supports JSF 1.1 and 1.2)
* Replaces Facelets 1.1 with JSF Facelets 2.0


* <tc:tree> and UITree extends now UIData
* Tree table: use a <tc:columnNode> inside of a <tc:sheet>
* Dynamic default-buttons in virtual forms
* Support of HTML5 data attributes
* Other HTML5 features
* Reimplementation of the input suggest control


You can find a migration how-to on the site:

Please check the release notes at
for a full list of the changes.

Known limitations and bugs:

This is an alpha-release, please don't use it in production environment.

For more information about Apache Tobago, please visit

Have fun,
-The MyFaces team

[1] http://www.w3.org/TR/CSP/

View raw message