What is your experience with JSF?

[manifoldronin]

You could hardly find more notorious technology in terms of security holes as JavaScript. A dream language for hackers.

I know we are like ten thousand miles OT by now but I just couldn't resist the bait - well IMHO the alleged security holes in javascripts are not really in javascript as a language itself, but rather come from developers knowing too little and assuming too much. Check out thedailywtf and you'll see incompetent people can actually be quite competent at finding ways to screw up their system security, with or without javascript - e.g., by relying on client-side security checking, or by injecting cookie values into SQL statements.

[uenluena]

The idea of JSF being easy and extendible is the biggest mistake that someone can make actually..

On the surface the technology seems to be fine...but as soon as you try to do things like custom components or try to do something like central exception handling without forcing the developers to deal with runtime exceptions in their mananged bean code, you run against a wall...

JSF is one of the few specs in java that are surely unfinished and one of the technologies that just ignore a lot of the best practices in software development ....

Try to do form based validations where certain fields have a condition to another field in the form etc...

Component based validation is no problem at all but if you want to write a custom validator that should validate a form instead of a component...you're screwed etc..

Just search the net for reviews and you will see that JSF is for sure not the way to go for big projects....

[rainwebs]

What are you talking about here? Nobody uses pure JSF these days. None of your mentioned problems is a problem anymore.

[uenluena]

we're using the IBM JSF implementation....

They're solved? Could you explain me in detail how exception handling is solved with runtime exceptions? (No sorry, im working in a portlet environment....web.xml error-page directive wont work for me)

How do you do form based validations with your custom validators?

Im just curious