[
https://issues.apache.org/jira/browse/WICKET-3098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pedro Santos updated WICKET-3098:
---------------------------------
Attachment: BehaviorRequestTarget.java.patch
An path preventing the disable behavior call at the request target
> AjaxEventBehavior#onEvent is invoked on disabled behavior
> ---------------------------------------------------------
>
> Key: WICKET-3098
> URL: https://issues.apache.org/jira/browse/WICKET-3098
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 1.4.9
> Reporter: Stanislav Dvorscak
> Attachments: BehaviorRequestTarget.java.patch
>
>
> Security bug AjaxEventBehavior#onEvent is invoked on disabled behavior. It
> should not be - it is really dangerous, can you fix it.
> I think it is security bug.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
