You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2016/08/26 15:43:21 UTC

[jira] [Commented] (WICKET-5094) ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted bookmarkable pages

    [ https://issues.apache.org/jira/browse/WICKET-5094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15439280#comment-15439280 ] 

ASF subversion and git services commented on WICKET-5094:
---------------------------------------------------------

Commit 4216e09a4cf23179cf9de3a23b1ad989caf7da91 in wicket's branch refs/heads/master from [~mgrigorov]
[ https://git-wip-us.apache.org/repos/asf?p=wicket.git;h=4216e09 ]

WICKET-6161 SecuritySettings.setEnforceMounts() should be applicable for all kind of pages

Revert 74e7767635b5f1f20c61c07be34c4141e1da2571 from WICKET-5094 and update javadocs


> ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted bookmarkable pages
> ------------------------------------------------------------------------------------------------
>
>                 Key: WICKET-5094
>                 URL: https://issues.apache.org/jira/browse/WICKET-5094
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 6.6.0, 1.5.10
>            Reporter: Sven Meier
>            Assignee: Sven Meier
>             Fix For: 6.7.0, 1.5.11
>
>
> ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent access to mounted-pages via BookmarkableMapper, e.g. when Page1.class is mounted:
>    http://localhost:8080/niceurl/a/nice/path/to/the/first/page
> ... then the following url will not be accepted:
>    http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
> But starting with Wicket 1.5.x access to *all* non-mounted pages via BookmarkableMapper is prevented, i.e. no url "http://localhost:8080/niceurl/wicket/bookmarkable/*" is matched.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)