Last Modified: July 10, 2014
Version 2.2.6 of the JSF reference implementation contains a fix for making the com.sun.faces.renderkit.ByteArrayGuard class cluster-aware by allowing the specification of a ClientSideSecretKey parameter accessible via a JNDI lookup in the following code (lines 212 to 222) from the setupKeyAndMac() method of the ByteArrayGuard class.
The InitialContext class is not on the JRE whitelist for the Google App Engine platform, so a NoClassDefFoundError exception is thrown. To address this issue, I propose an approach that is similar to what was done with lines 805 to 816 of the WebConfiguration class (the processJndiEntries method).
Google App Engine for Java > Using JavaServer Faces on the Google App Engine > Compatibility Issues >