title: Implications of saving session on the client with javax.faces.STATE_SAVING_METHOD
body: <p>My first JSF page was throwing <code>javax.faces.application.ViewExpiredException</code>. while I searched I got this solution which solved my problem. </p>
  
  <pre><code>&lt;context-param&gt;
      &lt;param-name&gt;javax.faces.STATE_SAVING_METHOD&lt;/param-name&gt;
      &lt;param-value&gt;client&lt;/param-value&gt;
  &lt;/context-param&gt;
  </code></pre>
  
  <p>But I am concerned about the security implication.</p>