You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by "Ernesto Reinaldo Barreiro (JIRA)" <ji...@apache.org> on 2010/10/27 08:54:20 UTC

[jira] Updated: (WICKET-3133) allows pages served over HTTP to contain forms that work over HTTPs.

     [ https://issues.apache.org/jira/browse/WICKET-3133?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ernesto Reinaldo Barreiro updated WICKET-3133:
----------------------------------------------

    Description: 
Use case: We have a public page served over HTTP and this Page should contain a form (e.g. a login form) that submits over HTTPs.

Problem: Right now HttpsRequestCycleProcessor acts as a switch redirecting to HTTP or HTTPS based on RequireHttps annotation. The result is that one has to extend  HttpsRequestCycleProcessor (in fact rewrite  it) to get form submition  working with POST method. More info can be found at [1]

Proposed solution: extend/modify HttpsRequestCycleProcessor,  ServletWebRequest, and so on, as described in  [1] to cover this use case.

1-http://apache-wicket.1842946.n4.nabble.com/SSL-Links-and-buttons-tt3001634.html



  was:
Use case: We have a public page served over HTTP and this form should contain a form (e.g. a login form) that submits over HTTPs.

Problem: Right now HttpsRequestCycleProcessor acts as a switch redirecting to HTTP or HTTPS based on RequireHttps annotation. The result is that one has to extend  HttpsRequestCycleProcessor (in fact rewrite  it) to get form submition  working with POST method. More info can be found at [1]

Proposed solution: extend/modify HttpsRequestCycleProcessor,  ServletWebRequest, and so on, as described in  [1] to cover this use case.

1-http://apache-wicket.1842946.n4.nabble.com/SSL-Links-and-buttons-tt3001634.html




fixed description

> allows pages served over HTTP to contain forms that work over HTTPs.
> --------------------------------------------------------------------
>
>                 Key: WICKET-3133
>                 URL: https://issues.apache.org/jira/browse/WICKET-3133
>             Project: Wicket
>          Issue Type: Improvement
>          Components: wicket
>    Affects Versions: 1.4.12
>         Environment: any
>            Reporter: Ernesto Reinaldo Barreiro
>            Priority: Minor
>   Original Estimate: 5h
>  Remaining Estimate: 5h
>
> Use case: We have a public page served over HTTP and this Page should contain a form (e.g. a login form) that submits over HTTPs.
> Problem: Right now HttpsRequestCycleProcessor acts as a switch redirecting to HTTP or HTTPS based on RequireHttps annotation. The result is that one has to extend  HttpsRequestCycleProcessor (in fact rewrite  it) to get form submition  working with POST method. More info can be found at [1]
> Proposed solution: extend/modify HttpsRequestCycleProcessor,  ServletWebRequest, and so on, as described in  [1] to cover this use case.
> 1-http://apache-wicket.1842946.n4.nabble.com/SSL-Links-and-buttons-tt3001634.html

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.