The default value for com.sun.faces.clientStateTimeout is invalid

[vsvetoslavov]

The constructor in WebConfiguration for the ClientStateTimeout value defines the default value as "".
The init() method of ClientSideStateHelper, however, contains the following:

  stateTimeoutEnabled = webConfig.isSet(ClientStateTimeout);
     if (stateTimeoutEnabled) {
         String timeout = webConfig.getOptionValue(ClientStateTimeout);
         try {
             stateTimeout = Long.parseLong(timeout);
         } catch (NumberFormatException nfe) {
             stateTimeout = Long.parseLong(ClientStateTimeout.getDefaultValue());
         }
     }

So if the value in the web.xml is invalid, an attempt is made to read "" as Long, which in turn results in NumberFormatException.
The above behaviour is present in 2.3.9.SP03 (WildFly 18.0.0). The code for 2.3.9.SP11 seems like that as well but I haven't tested with that version.
Browsing further I realized that there is no way to define a value for clientStateTimeout such that there will be no timeout (similar to the behaviour if there is no value defined in web.xml). This also seems wrong - it would be good if one is able to explicitly disable the timeout.
The same issue is described also here:
jboss/mojarra#78

[BalusC]

Reproduced.

[BalusC]

Fixed in #5049. It will now:

• disable the client state timeout when resolved context param has a negative value
• disable the client state timeout and log a warning when resolved context param is not parseable as long