You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@wicket.apache.org by Andrea Del Bene <an...@gmail.com> on 2013/09/06 21:25:34 UTC
Add .map files to default allowed files.
Hi,
as reported in the user list
(http://apache-wicket.1842946.n4.nabble.com/Access-denied-to-static-package-resource-td4661223.html),
the access to map files is not allowed by default and this could be a
problem if someone want to use them with JQuery or other libraries that
support them.
Should we add .map extension to default allowed static resources?
Re: Add .map files to default allowed files.
Posted by Andrea Del Bene <an...@gmail.com>.
Ok, sorry. I' missed the line where you say that you have added them...
> On Mon, Sep 9, 2013 at 12:24 PM, Andrea Del Bene <an...@gmail.com>wrote:
>
>> ok, thank you for your feedbacks. things will remain like they are now.
>>
> No. We have to remove the .map files for the next release.
>
>
>>> On Sat, Sep 7, 2013 at 7:12 AM, Martin Grigorov <mgrigorov@apache.org
>>> wrote:
>>>
>>>> I suggest to remove the .map files for now and re-add them again when
>> they
>>>> become more popular some day.
>>>>
>>> +1 - and then I'm not even sure that it should really be allowed by
>> default
>>> since they are for *debugging* in *production*. It seems like this
>> should
>>> by default be disabled and up to a user to add to a whitelist if
>>> $someConditionTheyDefine.
>>>
>>>
>>
Re: Add .map files to default allowed files.
Posted by Martin Grigorov <mg...@apache.org>.
On Mon, Sep 9, 2013 at 12:24 PM, Andrea Del Bene <an...@gmail.com>wrote:
> ok, thank you for your feedbacks. things will remain like they are now.
>
No. We have to remove the .map files for the next release.
> > On Sat, Sep 7, 2013 at 7:12 AM, Martin Grigorov <mgrigorov@apache.org
> >wrote:
> >
> >> I suggest to remove the .map files for now and re-add them again when
> they
> >> become more popular some day.
> >>
> > +1 - and then I'm not even sure that it should really be allowed by
> default
> > since they are for *debugging* in *production*. It seems like this
> should
> > by default be disabled and up to a user to add to a whitelist if
> > $someConditionTheyDefine.
> >
> >
>
>
Re: Add .map files to default allowed files.
Posted by Andrea Del Bene <an...@gmail.com>.
ok, thank you for your feedbacks. things will remain like they are now.
> On Sat, Sep 7, 2013 at 7:12 AM, Martin Grigorov <mg...@apache.org>wrote:
>
>> I suggest to remove the .map files for now and re-add them again when they
>> become more popular some day.
>>
> +1 - and then I'm not even sure that it should really be allowed by default
> since they are for *debugging* in *production*. It seems like this should
> by default be disabled and up to a user to add to a whitelist if
> $someConditionTheyDefine.
>
>
Re: Add .map files to default allowed files.
Posted by Jeremy Thomerson <je...@wickettraining.com>.
On Sat, Sep 7, 2013 at 7:12 AM, Martin Grigorov <mg...@apache.org>wrote:
> I suggest to remove the .map files for now and re-add them again when they
> become more popular some day.
>
+1 - and then I'm not even sure that it should really be allowed by default
since they are for *debugging* in *production*. It seems like this should
by default be disabled and up to a user to add to a whitelist if
$someConditionTheyDefine.
--
Jeremy Thomerson
http://wickettraining.com
Re: Add .map files to default allowed files.
Posted by Martin Grigorov <mg...@apache.org>.
I'm not sure about this.
I've added the .map files but now I'm not fully convinced.
Adding files to the whitelist makes SecurePackageResourceGuard slower in
its checks with every new item.
.map files are helper files to be able to debug compressed/minimized .js
files in production environment. How often a developer does this ?
And at the moment we have .map files only for jQuery. I doubt many of the
developers use this functionality yet.
I suggest to remove the .map files for now and re-add them again when they
become more popular some day.
On Sat, Sep 7, 2013 at 12:56 PM, Cedric Gatay <ga...@gmail.com> wrote:
> Hi,
> I think .map should be added to default.
> Regards,
>
> __
> Cedric Gatay (@Cedric_Gatay <http://twitter.com/Cedric_Gatay>)
> http://code-troopers.com | http://www.bloggure.info |
> http://cedric.gatay.fr
>
>
> On Fri, Sep 6, 2013 at 9:25 PM, Andrea Del Bene <an.delbene@gmail.com
> >wrote:
>
> > Hi,
> >
> > as reported in the user list (http://apache-wicket.1842946.**
> >
> n4.nabble.com/Access-denied-**to-static-package-resource-**td4661223.html<
> http://apache-wicket.1842946.n4.nabble.com/Access-denied-to-static-package-resource-td4661223.html
> >),
> > the access to map files is not allowed by default and this could be a
> > problem if someone want to use them with JQuery or other libraries that
> > support them.
> > Should we add .map extension to default allowed static resources?
> >
>
Re: Add .map files to default allowed files.
Posted by Cedric Gatay <ga...@gmail.com>.
Hi,
I think .map should be added to default.
Regards,
__
Cedric Gatay (@Cedric_Gatay <http://twitter.com/Cedric_Gatay>)
http://code-troopers.com | http://www.bloggure.info | http://cedric.gatay.fr
On Fri, Sep 6, 2013 at 9:25 PM, Andrea Del Bene <an...@gmail.com>wrote:
> Hi,
>
> as reported in the user list (http://apache-wicket.1842946.**
> n4.nabble.com/Access-denied-**to-static-package-resource-**td4661223.html<http://apache-wicket.1842946.n4.nabble.com/Access-denied-to-static-package-resource-td4661223.html>),
> the access to map files is not allowed by default and this could be a
> problem if someone want to use them with JQuery or other libraries that
> support them.
> Should we add .map extension to default allowed static resources?
>