PackageResourceBlockedException

[Ilkka Seppälä <il...@gmail.com>]

Hi,

I'm trying to implement a base page to be used by multiple web
applications. My idea was to make the base page reference some common css
and javascripts files through PackageResourceReferences:

BasePage.java

@Override
public void renderHead(IHeaderResponse response) {
super.renderHead(response);
ResourceReference lessFile = new
JavaScriptResourceReference(EuraKantaPage.class, "less-1.3.3.min.js");
JavaScriptHeaderItem lessItem = JavaScriptHeaderItem.forReference(lessFile);
response.render(lessItem);
ResourceReference tyylitFile = new
CssResourceReference(EuraKantaPage.class, "style.less");
CssHeaderItem tyylitItem = CssHeaderItem.forReference(tyylitFile);
response.render(tyylitItem);
}

But when I visit this base with my browser I get a stack trace beginning
with:

Last cause: Access denied to (static) package resource
<packagename>/style.less. See IPackageResourceGuard

What am I doing wrong?

Best regards,
Ilkka Seppälä

Re: PackageResourceBlockedException

[Martin Grigorov <mg...@apache.org>]

Hi,

You need to add it to the allowed extensions.
See http://seclists.org/fulldisclosure/2012/Mar/251


On Thu, Aug 22, 2013 at 2:31 PM, Ilkka Seppälä <il...@gmail.com> wrote:

> Hi,
>
> I'm trying to implement a base page to be used by multiple web
> applications. My idea was to make the base page reference some common css
> and javascripts files through PackageResourceReferences:
>
> BasePage.java
>
> @Override
> public void renderHead(IHeaderResponse response) {
> super.renderHead(response);
> ResourceReference lessFile = new
> JavaScriptResourceReference(EuraKantaPage.class, "less-1.3.3.min.js");
> JavaScriptHeaderItem lessItem =
> JavaScriptHeaderItem.forReference(lessFile);
> response.render(lessItem);
> ResourceReference tyylitFile = new
> CssResourceReference(EuraKantaPage.class, "style.less");
> CssHeaderItem tyylitItem = CssHeaderItem.forReference(tyylitFile);
> response.render(tyylitItem);
> }
>
> But when I visit this base with my browser I get a stack trace beginning
> with:
>
> Last cause: Access denied to (static) package resource
> <packagename>/style.less. See IPackageResourceGuard
>
> What am I doing wrong?
>
> Best regards,
> Ilkka Seppälä
>