[ 
https://issues.apache.org/jira/browse/WICKET-5678?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Martin Grigorov resolved WICKET-5678.
-------------------------------------

    Resolution: Cannot Reproduce

I see no problems with the provided quickstart app in Tomcat 8.0.9.

The home page loads without problems.
It has (a strange) HtmlTextArea component which creates a url to "ckeditor" 
(and doesn't uses it) that should trigger the error. But there is not error at 
all.

I also tried to request the ckeditor at 
http://localhost:8080/5678/wicket/resource/com.mycompany.HtmlTextArea/ckeditor 
but this just returns 404

Please be more specific next time.

> SecurePackageResourceGuard blocking static page 
> ------------------------------------------------
>
>                 Key: WICKET-5678
>                 URL: https://issues.apache.org/jira/browse/WICKET-5678
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 6.16.0
>         Environment: Fedora20 Tomcat 8
>            Reporter: Mennat Mokhtar
>            Assignee: Martin Grigorov
>              Labels: easyfix
>         Attachments: myproject.tar.gz
>
>
> IPackageResourceGuard packageResourceGuard = 
> application.getResourceSettings().getPackageResourceGuard();
>               if( packageResourceGuard instanceof SecurePackageResourceGuard 
> ){
>                       SecurePackageResourceGuard securePackageResourceGuard = 
> (SecurePackageResourceGuard) packageResourceGuard;
>                       securePackageResourceGuard.addPattern( 
> "+com/seanergie/wicket/markup/html/form/ckeditor/" );
>                       boolean accept = securePackageResourceGuard.accept( 
> null, "com/seanergie/wicket/markup/html/form/ckeditor/" );
>               }
> /********************************************************************************************/
> The above code results in accept being false.
> After tracing the problem seems to be in the loop matching the pattern line 
> 190 in SecurePackageResourceGuard.
> The same code is returning true when running under tomcat 7 and returning 
> false when running under tomcat 8.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to