jsf-2,passwords,client-side,mojarra,state-saving
Depends on Mojarra version. It had several flaws/fails in earlier versions. In Mojarra 1.2.x - 2.1.18, it was never actually used. The JNDI entry name was namely incorrectly documented. It was documented as com.sun.faces.ClientStateSavingPassword (with same prefix as web.xml context parameters), but the code actually checks for ClientStateSavingPassword. You should...