[
https://issues.apache.org/jira/browse/WICKET-5094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sven Meier updated WICKET-5094:
-------------------------------
Description:
ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent access
to mounted-pages via BookmarkableMapper, e.g. when Page1.class is mounted:
http://localhost:8080/niceurl/a/nice/path/to/the/first/page
... then the following url will not be accepted:
http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
But starting with Wicket 1.5.x access to *all* non-mounted pages via
BookmarkableMapper is prevented, i.e. no url
"http://localhost:8080/niceurl/wicket/bookmarkable/*"; is matched.
was:
ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent access
to mounted-pages via BookmarkableMapper, e.g. when Page1.class is mounted:
http://localhost:8080/niceurl/a/nice/path/to/the/first/page
... then the following url will not be accepted:
http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
But in Wicket 6 access to *all* non-mounted pages via BookmarkableMapper is
prevented, i.e. no url "http://localhost:8080/niceurl/wicket/bookmarkable/*"; is
matched.
Affects Version/s: 1.5.10
> ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted
> bookmarkable pages
> ------------------------------------------------------------------------------------------------
>
> Key: WICKET-5094
> URL: https://issues.apache.org/jira/browse/WICKET-5094
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 6.6.0, 1.5.10
> Reporter: Sven Meier
> Assignee: Sven Meier
>
> ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent
> access to mounted-pages via BookmarkableMapper, e.g. when Page1.class is
> mounted:
> http://localhost:8080/niceurl/a/nice/path/to/the/first/page
> ... then the following url will not be accepted:
>
> http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
> But starting with Wicket 1.5.x access to *all* non-mounted pages via
> BookmarkableMapper is prevented, i.e. no url
> "http://localhost:8080/niceurl/wicket/bookmarkable/*"; is matched.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
