[
https://issues.apache.org/jira/browse/WICKET-3098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12918923#action_12918923
]
Stanislav Dvorscak commented on WICKET-3098:
--------------------------------------------
Yes, it is easy to fix.
It should be in the same way as on all other places.
Because if something is disabled, it should be inaccessible.
The AjaxFormSubmitBehavior is more dangerous. And it extends this class.
Disabled behavior can start the form processing. And I think it is dangerous.
> AjaxEventBehavior#onEvent is invoked on disabled behavior
> ---------------------------------------------------------
>
> Key: WICKET-3098
> URL: https://issues.apache.org/jira/browse/WICKET-3098
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 1.4.9
> Reporter: Stanislav Dvorscak
>
> Security bug AjaxEventBehavior#onEvent is invoked on disabled behavior. It
> should not be - it is really dangerous, can you fix it.
> I think it is security bug.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
