You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by "Martin Grigorov (JIRA)" <ji...@apache.org> on 2013/02/28 15:35:12 UTC
[jira] [Commented] (WICKET-5066) Allow PackageResource to decide
itself whether it could be accepted or not
[ https://issues.apache.org/jira/browse/WICKET-5066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13589565#comment-13589565 ]
Martin Grigorov commented on WICKET-5066:
-----------------------------------------
In our case we need to expose an applet jar as a resource. PackageResourceGuard rejects access to .class and .jar files by default. Adding a pattern to SecurePackageResourceGuard doesn't help because the blacklist in PRG is checked before the whitelist in SPRG.
> Allow PackageResource to decide itself whether it could be accepted or not
> --------------------------------------------------------------------------
>
> Key: WICKET-5066
> URL: https://issues.apache.org/jira/browse/WICKET-5066
> Project: Wicket
> Issue Type: Improvement
> Components: wicket
> Affects Versions: 6.6.0
> Reporter: Martin Grigorov
> Assignee: Martin Grigorov
>
> By default PackageResource uses IPackageResourceGuard to check whether it can be rendered or not.
> By making org.apache.wicket.request.resource.PackageResource#accept(Class, String) protected the resource itself can do the check, e.g. allow the access when usually the guard would reject.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira