MYFACES-3454 composite component is not rendered anymore with 2.1.6-SNAPSHOT (added config param org.apache.myfaces.STRICT_JSF_2_ALLOW_SLASH_LIBRARY_NAME) [CVE-2011-4367]