I am capable of deploying RF app to unpatched Mojarra - e.g. version < 2.1.28.
As described in
RF-13665 this should not be possible. I tried this with Metamer and JBoss AS 7.1 + EAP 6.1.0.GA.
We already have a code in place which should detect this and throw exception but it doesn't seem to work - link to GitHub