[DELTASPIKE-752] ensure a secure maximum length of the window-id

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.0.3
• Fix Version/s: 1.1.0
• Component/s: JSF-Module, JSF22-Module
• Assignee: Unassigned
• Reporter: Heiko Kopp
• Created: 25/Oct/14 19:14
• Updated: 04/Nov/14 21:15
• Resolved: 27/Oct/14 11:13

Description

if the window-id is too long, we would need to escape it to avoid XSS.