[
https://issues.apache.org/jira/browse/WICKET-5678?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14103658#comment-14103658
]
Sven Meier commented on WICKET-5678:
------------------------------------
I've pasted your code into SecurePackageResourceGuardTest and it returned true
as expected.
Please create a quickstart so we can check what's going wrong under tomcat 8.
> SecurePackageResourceGuard blocking static page
> ------------------------------------------------
>
> Key: WICKET-5678
> URL: https://issues.apache.org/jira/browse/WICKET-5678
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 6.16.0
> Environment: Fedora20 Tomcat 8
> Reporter: Mennat Mokhtar
> Labels: easyfix
>
> IPackageResourceGuard packageResourceGuard =
> application.getResourceSettings().getPackageResourceGuard();
> if( packageResourceGuard instanceof SecurePackageResourceGuard
> ){
> SecurePackageResourceGuard securePackageResourceGuard =
> (SecurePackageResourceGuard) packageResourceGuard;
> securePackageResourceGuard.addPattern(
> "+com/seanergie/wicket/markup/html/form/ckeditor/" );
> boolean accept = securePackageResourceGuard.accept(
> null, "com/seanergie/wicket/markup/html/form/ckeditor/" );
> }
> /********************************************************************************************/
> The above code results in accept being false.
> After tracing the problem seems to be in the loop matching the pattern line
> 190 in SecurePackageResourceGuard.
> The same code is returning true when running under tomcat 7 and returning
> false when running under tomcat 8.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
