provide hook to enforce fqn's leaking out from shared resources
---------------------------------------------------------------

                 Key: WICKET-2731
                 URL: https://issues.apache.org/jira/browse/WICKET-2731
             Project: Wicket
          Issue Type: Improvement
          Components: wicket
    Affects Versions: 1.4.6
            Reporter: Antoine van Wel



Enforcing a requirement of not leaking out FQN's from the webapplication is 
currently not possible. It is possible to mount resources; however it is easy 
to forget one.

SharedResources.resourceKey() gets the class's fully quantified name when it 
has not been mapped.

potential fixes:
(1) depending on a boolean flag throw a RuntimeException when the resource has 
not been mapped -> setEnforcedResourceMappings(true)
(2) provide a hook such that at runtime the mapping can be determined, for 
instance by encrypting the fqn -> instead of calling scope.getName() call an 
extendable method
(3) somehow allow to override the SharedResources.resourceKey method







-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to