Mennat Mokhtar created WICKET-5678:
--------------------------------------
Summary: SecurePackageResourceGuard blocking static page
Key: WICKET-5678
URL: https://issues.apache.org/jira/browse/WICKET-5678
Project: Wicket
Issue Type: Bug
Components: wicket
Affects Versions: 6.16.0
Environment: Fedora20 Tomcat 8
Reporter: Mennat Mokhtar
IPackageResourceGuard packageResourceGuard =
application.getResourceSettings().getPackageResourceGuard();
if( packageResourceGuard instanceof SecurePackageResourceGuard
){
SecurePackageResourceGuard securePackageResourceGuard =
(SecurePackageResourceGuard) packageResourceGuard;
securePackageResourceGuard.addPattern(
"+com/seanergie/wicket/markup/html/form/ckeditor/" );
boolean accept = securePackageResourceGuard.accept(
null, "com/seanergie/wicket/markup/html/form/ckeditor/" );
}
/********************************************************************************************/
The above code results in accept being false.
After tracing the problem seems to be in the loop matching the pattern line 190.
The same code is returning true when running under tomcat 7 and returning false
when running under tomcat 8.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
