Secure JSF Application – why you should always define a servlet mapping

If you deploy a JSF application in WildFly 8, you can omit to define the JSF serlvet mapping. In this case three default mappings will be active out of the box. <context-root>/faces/* <context-root>/*.jsf <context-root>/*.faces Tested on WildFly 8.0.0.CR1 and JBoss EAP 6.2.0.GA This behavior is not mentioned in the JSF 2.1 spec. But it explicitly […]