Before enabling this feature upgrade to the latest available versions (older versions contain a critical security vulnerability).
The latest versions containing a fix are:
- for CE users 220.127.116.11 or later downloads
- for PE/EE users 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52 or later premium downloads
Default: none [Since 5.0.0]
By default, ZK only searches the class path for the required CWR. By specifying a directory here, ZK will search the directory first and then the class path. This implies that a developer can override the default behavior by providing a file with the same name.
Notice: never put security sensitive files in the directory specified here, since they can be accessed externally.
WEB-INF/cwr, we have to specify the following in WEB-INF/zk.xml:
<library-property> <name>org.zkoss.web.util.resource.dir</name> <value>/WEB-INF/cwr</value> </library-property>
zul.jar when replacing
zul/inp/Textbox.js that is part of
Rather, you could specify this library property as described above, and place the modified version of
Textbox.js under the
/WEB-INF/cwr/js/zul/inp directory. Then, ZK will load
/WEB-INF/cwr/js/zul/inp/Textbox.js you placed rather than the default one in
Notice that if debug-js is turned on, ZK will actually look for
Textbox.src.js rather than
Textbox.js in the above example. Thus, it is suggested to put both
/WEB-INF/cwr/js/zul/inp directories. In addition,
Textbox.src.js is suggested to be the readable one (for debugging purpose), while
Textbox.js is the compressed one (for production purpose).
|Copyright © Potix Corporation. This article is licensed under GNU Free Documentation License.|