[GitHub] [wicket] theigl edited a comment on issue #411: WICKET-6751 Page synchronizer strategies

2020-02-28 Thread GitBox
theigl edited a comment on issue #411: WICKET-6751 Page synchronizer strategies URL: https://github.com/apache/wicket/pull/411#issuecomment-592555627 @svenmeier: This would be possible. But the only method of this interface would be: `IPageManager adapt(IPageManager pagemanager)`

[GitHub] [wicket] theigl commented on issue #411: WICKET-6751 Page synchronizer strategies

2020-02-28 Thread GitBox
theigl commented on issue #411: WICKET-6751 Page synchronizer strategies URL: https://github.com/apache/wicket/pull/411#issuecomment-592555627 @svenmeier: This would be possible. But the only method of this interface would be: `IPageManager adapt(IPageManager pagemanager)`

[GitHub] [wicket] svenmeier commented on issue #411: WICKET-6751 Page synchronizer strategies

2020-02-28 Thread GitBox
svenmeier commented on issue #411: WICKET-6751 Page synchronizer strategies URL: https://github.com/apache/wicket/pull/411#issuecomment-592550517 If PageAccessSynchronizer delegates everything to a IPageLockManager anyway, wouldn't it be simpler to introduce IPageAccessSynchronizer

[GitHub] [wicket] theigl opened a new pull request #411: Wicket 6751 Page synchronizer strategies

2020-02-28 Thread GitBox
theigl opened a new pull request #411: Wicket 6751 Page synchronizer strategies URL: https://github.com/apache/wicket/pull/411 This PR adds support for providing a custom lock manager for page access synchronization. Session-scoped locking only works in servlet container

Re: CSP and UI libraries

2020-02-28 Thread Martin Grigorov
On Fri, Feb 28, 2020 at 11:37 AM Andrea Del Bene wrote: > On Thu, Feb 27, 2020 at 1:03 PM Martin Grigorov > wrote: > > > > > > > I wanted to ask here whether we need an API that says whether CSP is > > enabled or disabled. > > For example UI libraries like Wicket Bootstrap & Wicket JQuery UI

Re: CSP and UI libraries

2020-02-28 Thread Andrea Del Bene
On Thu, Feb 27, 2020 at 1:03 PM Martin Grigorov wrote: > > > I wanted to ask here whether we need an API that says whether CSP is > enabled or disabled. > For example UI libraries like Wicket Bootstrap & Wicket JQuery UI (and any > other) may use it to decide how to behave depending on the

Re: CSP and UI libraries

2020-02-28 Thread Maxim Solodovnik
It is possible but this CSP will not be `strict` anymore :))) On Fri, 28 Feb 2020 at 15:23, Sebastien Briquet wrote: > > Thank you so much Emond! I will try that! -- WBR Maxim aka solomax

Re: CSP and UI libraries

2020-02-28 Thread Sebastien Briquet
Thank you so much Emond! I will try that!

Re: CSP and UI libraries

2020-02-28 Thread Emond Papegaaij
Hi Sebastien, Unfortunately, not all libraries work with a strict CSP (Wicket used to be one of those :) ). For such a library, you might want to roll a less strict CSP via an IInitializer. From what I see in the link sent by Maxim, you'll need to add 'unsafe-eval' for Kendo: