[
https://issues.apache.org/jira/browse/WICKET-5094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sven Meier resolved WICKET-5094.
--------------------------------
Resolution: Fixed
Fix Version/s: 1.5.11
6.7.0
changed to enforce for mount pages only
> ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted
> bookmarkable pages
> ------------------------------------------------------------------------------------------------
>
> Key: WICKET-5094
> URL: https://issues.apache.org/jira/browse/WICKET-5094
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 6.6.0, 1.5.10
> Reporter: Sven Meier
> Assignee: Sven Meier
> Fix For: 6.7.0, 1.5.11
>
>
> ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent
> access to mounted-pages via BookmarkableMapper, e.g. when Page1.class is
> mounted:
> http://localhost:8080/niceurl/a/nice/path/to/the/first/page
> ... then the following url will not be accepted:
>
> http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
> But starting with Wicket 1.5.x access to *all* non-mounted pages via
> BookmarkableMapper is prevented, i.e. no url
> "http://localhost:8080/niceurl/wicket/bookmarkable/*"; is matched.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
