[jira] [Commented] (WICKET-5977) CryptoMapper does not encrypt query parameters for BookmarkablePageLink

["Pedro Santos (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/WICKET-5977?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15464235#comment-15464235 ] 

Pedro Santos commented on WICKET-5977:
--------------------------------------

[~mgrigorov], the currently logic agreed on WICKET-5326 looks OK

[~vitiate], by mounting TestPage page to "test" you are giving it a specific name. By using CryptoMapper you are throwing it away, so what is the point into mount it in the first place?

> CryptoMapper does not encrypt query parameters for BookmarkablePageLink
> -----------------------------------------------------------------------
>
>                 Key: WICKET-5977
>                 URL: https://issues.apache.org/jira/browse/WICKET-5977
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 6.18.0
>         Environment: Windows 7 x64
>            Reporter: Jesse Bonzo
>            Priority: Minor
>              Labels: bookmarkable, link, security
>         Attachments: WicketCryptoTest.zip
>
>
> In 6.17, mounting with CryptoMapper resulted in an encrypted url when page parameters are passed to a BookmarkablePageLink.
> eg
> <a wicket:id="testPageLink" href="./Test?test1=testing">Test Page Link</a>
> became
> <a wicket:id="testPageLink" href="./WJv23oU4t3ZeiLLpNT81ezNvA-L53GFM/WJvf2">Test Page Link</a>
> In 6.18+ the link stays as is.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)