Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_10.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_10.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_10.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_10.html Tue Feb 3 11:19:18 2015 @@ -214,7 +214,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div>
Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_11.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_11.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_11.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_11.html Tue Feb 3 11:19:18 2015 @@ -202,7 +202,7 @@ Remember that we can get the URL of a re <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_12.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_12.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_12.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_12.html Tue Feb 3 11:19:18 2015 @@ -206,7 +206,7 @@ By default, if resource files can not be <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_13.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_13.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_13.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_13.html Tue Feb 3 11:19:18 2015 @@ -193,7 +193,7 @@ In this chapter we have learnt how to ma <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_2.html Tue Feb 3 11:19:18 2015 @@ -192,7 +192,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_3.html Tue Feb 3 11:19:18 2015 @@ -213,7 +213,7 @@ Package resources can be localized follo <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_4.html Tue Feb 3 11:19:18 2015 @@ -209,7 +209,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_5.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_5.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_5.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_5.html Tue Feb 3 11:19:18 2015 @@ -200,7 +200,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_6.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_6.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_6.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_6.html Tue Feb 3 11:19:18 2015 @@ -203,7 +203,7 @@ A specific resource reference can not be <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_7.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_7.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_7.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_7.html Tue Feb 3 11:19:18 2015 @@ -230,7 +230,7 @@ The following code is taken from the App <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_8.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_8.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_8.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_8.html Tue Feb 3 11:19:18 2015 @@ -197,7 +197,7 @@ Starting from version 6.15.0 we can spec <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/resources_9.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/resources_9.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/resources_9.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/resources_9.html Tue Feb 3 11:19:18 2015 @@ -213,7 +213,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/security_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/security_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/security_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/security_1.html Tue Feb 3 11:19:18 2015 @@ -268,7 +268,7 @@ Since both <code>restartResponseAtSignIn <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/security_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/security_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/security_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/security_2.html Tue Feb 3 11:19:18 2015 @@ -303,7 +303,7 @@ Application class <code>AuthenticatedWeb <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/security_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/security_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/security_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/security_3.html Tue Feb 3 11:19:18 2015 @@ -163,7 +163,7 @@ function addJsClass() { <h2 id="security_3">21.3 Using HTTPS protocol</h2> -<p class="paragraph"/>HTTPS is the standard technology adopted on Internet to create a secure communication channel between web applications and their users.<p class="paragraph"/>In Wicket we can easily protect our pages with HTTPS mounting a special request mapper called <code>HttpsMapper</code> and using annotation RequireHttps with those pages we want to serve over this protocol. Both these two entities are in package <code>org.apache.wicket.protocol.https</code>.<p class="paragraph"/>HttpsMapper wraps an existing mapper and redirects incoming requests to HTTPS if the related response must render a page containing annotation <code>RequireHttps</code>. Most of the times the wrapped mapper will be the root one, just like we saw before for <code>CryptoManager</code> in paragraph 8.6.6.<p class="paragraph"/>Another parameter needed to build a <code>HttpsMapper</code> is an instance of class <code>HttpsConfi</code>g. This class allows us to specify which ports must be used for HTTPS a nd HTTP. By default the port numbers used by these two protocols are respectively 443 and 80.<p class="paragraph"/>The following code is taken from project <code>HttpsProtocolExample</code> and illustrates how to enable HTTPS in our applications:<p class="paragraph"/><div class="code"><pre>//Application class code… +<p class="paragraph"/>HTTPS is the standard technology adopted on Internet to create a secure communication channel between web applications and their users.<p class="paragraph"/>In Wicket we can easily protect our pages with HTTPS mounting a special request mapper called <code>HttpsMapper</code> and using annotation RequireHttps with those pages we want to serve over this protocol. Both these two entities are in package <code>org.apache.wicket.protocol.https</code>.<p class="paragraph"/>HttpsMapper wraps an existing mapper and redirects incoming requests to HTTPS if the related response must render a page containing annotation <code>RequireHttps</code>. Most of the times the wrapped mapper will be the root one, just like we saw before for <code>CryptoMapper</code> in paragraph 10.6.<p class="paragraph"/>Another parameter needed to build a <code>HttpsMapper</code> is an instance of class <code>HttpsConfi</code>g. This class allows us to specify which ports must be used for HTTPS and HTTP. By default the port numbers used by these two protocols are respectively 443 and 80.<p class="paragraph"/>The following code is taken from project <code>HttpsProtocolExample</code> and illustrates how to enable HTTPS in our applications:<p class="paragraph"/><div class="code"><pre>//Application class code… @Override <span class="java-keyword">public</span> void init(){ setRootRequestMapper(<span class="java-keyword">new</span> HttpsMapper(getRootRequestMapper(), @@ -189,6 +189,7 @@ function addJsClass() { }</pre></div> + <div style="clear:both;margin-top:15px;"></div> <div class="toc-item prev-left"><a href="../../guide/nativewebsockets.html"><< <strong>20</strong><span>Native WebSockets</span></a></div> @@ -215,7 +216,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/security_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/security_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/security_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/security_4.html Tue Feb 3 11:19:18 2015 @@ -2,7 +2,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> <html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en"> <head> - <title>21.4 Package Resource Guard 6.x</title> + <title>21.4 URLs encryption in detail 6.x</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <link rel="stylesheet" href="../css/main.css" type="text/css" media="screen, print" title="Style" charset="utf-8"/> <link rel="stylesheet" href="../css/pdf.css" type="text/css" media="print" title="PDF" charset="utf-8"/> @@ -149,7 +149,7 @@ function addJsClass() { <div class="project"> - <h1>21.4 Package Resource Guard - Reference Documentation</h1> + <h1>21.4 URLs encryption in detail - Reference Documentation</h1> <p><strong>Authors:</strong> Andrea Del Bene, Martin Grigorov, Carsten Hufe, Christian Kroemer, Daniel Bartl, Paul BorÈ</p> @@ -162,26 +162,35 @@ function addJsClass() { -<h2 id="security_4">21.4 Package Resource Guard</h2> -<p class="paragraph"/>Wicket internally uses an entity called package resource guard to protect package resources from external access. This entity is an implementation of interface <code>org.apache.wicket.markup.html.IPackageResourceGuard</code>.<p class="paragraph"/>By default Wicket applications use as package resource guard class <code>SecurePackageResourceGuard</code>, which allows to access only to the following file extensions (grouped by type):<p class="paragraph"/><table class="wiki-table" cellpadding="0" cellspacing="0" border="0"><tr><th>File</th><th>Extensions</th></tr><tr class="table-odd"><td><strong class="bold">JavaScript files</strong></td><td>.js</td></tr><tr class="table-even"><td><strong class="bold">CSS files</strong></td><td>.css</td></tr><tr class="table-odd"><td><strong class="bold">HTML pages</strong></td><td>.html</td></tr><tr class="table-even"><td><strong class="bold">Textual files</strong></td><td>.txt</td></tr><tr class="table-odd"><td><strong class="bo ld">Flash files</strong></td><td>.swf</td></tr><tr class="table-even"><td><strong class="bold">Picture files</strong></td><td>.png, .jpg, .jpeg, .gif, .ico, .cur, .bmp, .svg</td></tr><tr class="table-odd"><td><strong class="bold">Web font files</strong></td><td>.eot, .ttf, .woff</td></tr></table><p class="paragraph"/>To modify the set of allowed files formats we can add one or more patterns with method <code>addPattern(String)</code>. The rules to write a pattern are the following: +<h2 id="security_4">21.4 URLs encryption in detail</h2> +In chapter <a href="../guide/single.html#urls_6" class="guide">10.6</a> we have seen how to encrypt URLs using <code>CryptoMapper</code> request mapper. To encrypt/decrypt page URLs <code>CryptoMapper</code> uses an instance of <code>org.apache.wicket.util.crypt.ICrypt</code> interface:<p class="paragraph"/><div class="code"><pre><span class="java-keyword">public</span> <span class="java-keyword">interface</span> ICrypt +{ + <span class="java-object">String</span> encryptUrlSafe(<span class="java-keyword">final</span> <span class="java-object">String</span> plainText);<p class="paragraph"/> <span class="java-object">String</span> decryptUrlSafe(<span class="java-keyword">final</span> <span class="java-object">String</span> encryptedText);<p class="paragraph"/> … +}</pre></div><p class="paragraph"/>The default implementation for this interface is class <code>org.apache.wicket.util.crypt.SunJceCrypt</code>. It provides password-based cryptography using <code>PBEWithMD5AndDES</code> algorithm coming with the standard security providers in the Java Runtime Environment.<p class="paragraph"/><blockquote class="note"> +For better security it is recommended to install Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction <a href="http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html"; target="blank">Policy Files</a> for your version of JDK/JRE and use stronger algorithms. See this <a href="https://github.com/apache/wicket/blob/42ce1faa57d3617ccaa443045537306fabf4d71a/wicket-util/src/test/java/org/apache/wicket/util/crypt/UnlimitedStrengthJurisdictionPolicyTest.java#L67"; target="blank">example</a> of a custom <code>ICrypt</code> implementation for inspiration. +</blockquote><p class="paragraph"/>By using <code>CryptoMapper(IRequestMapper wrappedMapper, Application application)</code> constructor the mapper will use the configured <code>org.apache.wicket.util.crypt.ICryptFactory</code> from <code>org.apache.wicket.settings.ISecuritySettings#getCryptFactory()</code>. To use a stronger cryptography mechanism there are the following options: <ul class="star"> -<li>patterns start with either a "+" or a "-". In the first case the pattern will add one or more file to the set while starting a pattern with a â-â we exclude all the files matching the given pattern. For example pattern â-web.xmlâ excludes all web.xml files in all directories.</li> -<li>wildcard character â*â is supported as placeholder for zero or more characters. For example pattern â+*.mp4â adds all the mp4 files inside all directories.</li> -<li>subdirectories are supported as well. For example pattern â+documents/*.pdfâ adds all pdf files under âdocumentsâ directory. Character â*â can be used with directories to specify a nesting level. For example â+documents/*/*.pdfâ adds all pdf files placed one level below âdocumentsâ directory.</li> -<li>a double wildcard character â**â indicates zero or more subdirectories. For example pattern â+documents/**/*.pdfâ adds all pdf files placed inside âdocumentsâ directory or inside any of its subdirectories.</li> -</ul><p class="paragraph"/>Patterns that allow to access to every file with a given extensions (such as â+*.pdfâ) should be always avoided in favour of more restrictive expressions that contain a directory structure:<p class="paragraph"/><div class="code"><pre>//Application class code… -@Override -<span class="java-keyword">public</span> void init() +<li>The first option is to use constructor <code>CryptoMapper(IRequestMapper wrappedMapper, IProvider<ICrypt> cryptProvider)</code> and give it an implementation of <code>org.apache.wicket.util.IProvider</code> that returns a custom <code>org.apache.wicket.util.crypt.ICrypt</code>.</li> +</ul><p class="paragraph"/><blockquote class="note"> +<code>org.apache.wicket.util.IProvider</code> is a single-method interface that acts as object supplier: +</blockquote><p class="paragraph"/><div class="code"><pre><span class="java-keyword">public</span> <span class="java-keyword">interface</span> IProvider<T> { - IPackageResourceGuard packageResourceGuard = application.getResourceSettings() - .getPackageResourceGuard(); - <span class="java-keyword">if</span> (packageResourceGuard <span class="java-keyword">instanceof</span> SecurePackageResourceGuard) - { - SecurePackageResourceGuard guard = (SecurePackageResourceGuard) packageResourceGuard; - //Allow to access only to pdf files placed in the â<span class="java-keyword">public</span>â directory. - guard.addPattern(<span class="java-quote">"+<span class="java-keyword">public</span>/*.pdf"</span>); - } + T get(); }</pre></div> +<ul class="star"> +<li>The second option is to register a cipher factory at application level with method <code>setCryptFactory(ICryptFactory cryptFactory)</code> of interface <code>ISecuritySettings</code>:</li> +</ul><p class="paragraph"/><div class="code"><pre>@Override +<span class="java-keyword">public</span> void init() { + <span class="java-keyword">super</span>.init(); + getSecuritySettings().setCryptFactory(<span class="java-keyword">new</span> SomeCryptFactory()); + setRootRequestMapper(<span class="java-keyword">new</span> CryptoMapper(getRootRequestMapper(), <span class="java-keyword">this</span>)); +}</pre></div><p class="paragraph"/> +Since version 6.19.0 Wicket uses <code>org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory</code> as a default factory for <code>ICrypt</code> objects. This factory generates a unique key for each user that is stored in her HTTP +session. This way it helps to protect the application against <a href="https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)" target="blank">CSRF</a> attacks - the <form> action url will be encrypted in such way that it will be unique +for each user of the application. The url itself serves as <a href="https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Encrypted_Token_Pattern" target="blank">encrypted token</a>.<p class="paragraph"/><blockquote class="warning"> +<code>org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory</code> binds the http session if it is not already bound! If the application needs to run in stateless mode then the application will have to provide a custom +implementation of <code>ICryptFactory</code> that stores the user specific keys by other means. +</blockquote> @@ -211,7 +220,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/security_5.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/security_5.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/security_5.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/security_5.html Tue Feb 3 11:19:18 2015 @@ -2,7 +2,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> <html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en"> <head> - <title>21.5 Summary 6.x</title> + <title>21.5 Package Resource Guard 6.x</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <link rel="stylesheet" href="../css/main.css" type="text/css" media="screen, print" title="Style" charset="utf-8"/> <link rel="stylesheet" href="../css/pdf.css" type="text/css" media="print" title="PDF" charset="utf-8"/> @@ -149,7 +149,7 @@ function addJsClass() { <div class="project"> - <h1>21.5 Summary - Reference Documentation</h1> + <h1>21.5 Package Resource Guard - Reference Documentation</h1> <p><strong>Authors:</strong> Andrea Del Bene, Martin Grigorov, Carsten Hufe, Christian Kroemer, Daniel Bartl, Paul BorÈ</p> @@ -162,8 +162,27 @@ function addJsClass() { -<h2 id="security_5">21.5 Summary</h2> -<p class="paragraph"/> In this chapter we have seen the components and the mechanisms that allow us to implement security policies in our Wicket-based applications. Wicket comes with an out of the box support for both authorization and authentication.<p class="paragraph"/>The central element of authorization mechanism is the interface <code>IAuthorizationStrategy</code> which decouples our components from any detail about security strategy. The implementations of this interface must decide if a user is allowed to instantiate a given page or component and if she/he can perform a given action on it.<p class="paragraph"/>Wicket natively supports role-based authorizations with strategies <code>MetaDataRoleAuthorizationStrategy</code> and <code>AnnotationsRoleAuthorizationStrategy</code>. The difference between these two strategies is that the first offers a programmatic approach for role handling while the second promotes a declarative approach using built-in annotations.<p class="parag raph"/>After having explored how Wicket internally implements authentication and authorization, in the last part of the chapter we have learnt how to configure our applications to support HTTPS and how to specify which pages must be served over this protocol.<p class="paragraph"/>In the last paragraph we have seen how Wicket protects package resources with a guard entity that allows us to decide which package resources can be accessed from users.<p class="paragraph"/><p class="paragraph"/> +<h2 id="security_5">21.5 Package Resource Guard</h2> +<p class="paragraph"/>Wicket internally uses an entity called package resource guard to protect package resources from external access. This entity is an implementation of interface <code>org.apache.wicket.markup.html.IPackageResourceGuard</code>.<p class="paragraph"/>By default Wicket applications use as package resource guard class <code>SecurePackageResourceGuard</code>, which allows to access only to the following file extensions (grouped by type):<p class="paragraph"/><table class="wiki-table" cellpadding="0" cellspacing="0" border="0"><tr><th>File</th><th>Extensions</th></tr><tr class="table-odd"><td><strong class="bold">JavaScript files</strong></td><td>.js</td></tr><tr class="table-even"><td><strong class="bold">CSS files</strong></td><td>.css</td></tr><tr class="table-odd"><td><strong class="bold">HTML pages</strong></td><td>.html</td></tr><tr class="table-even"><td><strong class="bold">Textual files</strong></td><td>.txt</td></tr><tr class="table-odd"><td><strong class="bo ld">Flash files</strong></td><td>.swf</td></tr><tr class="table-even"><td><strong class="bold">Picture files</strong></td><td>.png, .jpg, .jpeg, .gif, .ico, .cur, .bmp, .svg</td></tr><tr class="table-odd"><td><strong class="bold">Web font files</strong></td><td>.eot, .ttf, .woff</td></tr></table><p class="paragraph"/>To modify the set of allowed files formats we can add one or more patterns with method <code>addPattern(String)</code>. The rules to write a pattern are the following: +<ul class="star"> +<li>patterns start with either a "+" or a "-". In the first case the pattern will add one or more file to the set while starting a pattern with a â-â we exclude all the files matching the given pattern. For example pattern â-web.xmlâ excludes all web.xml files in all directories.</li> +<li>wildcard character â*â is supported as placeholder for zero or more characters. For example pattern â+*.mp4â adds all the mp4 files inside all directories.</li> +<li>subdirectories are supported as well. For example pattern â+documents/*.pdfâ adds all pdf files under âdocumentsâ directory. Character â*â can be used with directories to specify a nesting level. For example â+documents/*/*.pdfâ adds all pdf files placed one level below âdocumentsâ directory.</li> +<li>a double wildcard character â**â indicates zero or more subdirectories. For example pattern â+documents/**/*.pdfâ adds all pdf files placed inside âdocumentsâ directory or inside any of its subdirectories.</li> +</ul><p class="paragraph"/>Patterns that allow to access to every file with a given extensions (such as â+*.pdfâ) should be always avoided in favour of more restrictive expressions that contain a directory structure:<p class="paragraph"/><div class="code"><pre>//Application class code… +@Override +<span class="java-keyword">public</span> void init() +{ + IPackageResourceGuard packageResourceGuard = application.getResourceSettings() + .getPackageResourceGuard(); + <span class="java-keyword">if</span> (packageResourceGuard <span class="java-keyword">instanceof</span> SecurePackageResourceGuard) + { + SecurePackageResourceGuard guard = (SecurePackageResourceGuard) packageResourceGuard; + //Allow to access only to pdf files placed in the â<span class="java-keyword">public</span>â directory. + guard.addPattern(<span class="java-quote">"+<span class="java-keyword">public</span>/*.pdf"</span>); + } +}</pre></div> + <div style="clear:both;margin-top:15px;"></div> @@ -192,7 +211,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Added: wicket/common/site/trunk/_site/guide/guide/pages/security_6.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/security_6.html?rev=1656683&view=auto ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/security_6.html (added) +++ wicket/common/site/trunk/_site/guide/guide/pages/security_6.html Tue Feb 3 11:19:18 2015 @@ -0,0 +1,203 @@ +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en"> +<head> + <title>21.6 Summary 6.x</title> + <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> + <link rel="stylesheet" href="../css/main.css" type="text/css" media="screen, print" title="Style" charset="utf-8"/> + <link rel="stylesheet" href="../css/pdf.css" type="text/css" media="print" title="PDF" charset="utf-8"/> + <script type="text/javascript"> +function addJsClass() { + var classes = document.body.className.split(" "); + classes.push("js"); + document.body.className = classes.join(" "); +} + </script> +</head> + +<body class="body" onload="addJsClass();"> +<div id="navigation"> + <ul> + <li> + <div id="nav-summary" onmouseover="toggleNavSummary(false)" onmouseout="toggleNavSummary(true)"> + <a href="../../guide/index.html" class="button">Table of contents</a> + + <div id="nav-summary-childs" style="display:none;"> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/introduction.html"><strong>1</strong><span>Introduction</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/howToSource.html"><strong>2</strong><span>How to use the example code</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/whyLearn.html"><strong>3</strong><span>Why should I learn Wicket?</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/helloWorld.html"><strong>4</strong><span>Wicket says “Hello world!”</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/layout.html"><strong>5</strong><span>Wicket as page layout manager</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/keepControl.html"><strong>6</strong><span>Keeping control over HTML</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/componentLifecycle.html"><strong>7</strong><span>Components lifecycle</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/versioningCaching.html"><strong>8</strong><span>Page versioning and caching</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/requestProcessing.html"><strong>9</strong><span>Under the hood of the request processing</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/urls.html"><strong>10</strong><span>Wicket Links and URL generation</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/modelsforms.html"><strong>11</strong><span>Wicket models and forms</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/forms2.html"><strong>12</strong><span>Wicket forms in detail</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/repeaters.html"><strong>13</strong><span>Displaying multiple items with repeaters</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/i18n.html"><strong>14</strong><span>Internationalization with Wicket</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/resources.html"><strong>15</strong><span>Resource management with Wicket</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/jsintegration.html"><strong>16</strong><span>An example of integration with JavaScript</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/advanced.html"><strong>17</strong><span>Wicket advanced topics</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/ajax.html"><strong>18</strong><span>Working with AJAX</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/jee.html"><strong>19</strong><span>Integration with enterprise containers</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/nativewebsockets.html"><strong>20</strong><span>Native WebSockets</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/security.html"><strong>21</strong><span>Security with Wicket</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/testing.html"><strong>22</strong><span>Test Driven Development with Wicket</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/testingspring.html"><strong>23</strong><span>Test Driven Development with Wicket and Spring</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/bestpractices.html"><strong>24</strong><span>Wicket Best Practices</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/internals.html"><strong>25</strong><span>Wicket Internals</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/maven.html"><strong>26</strong><span>Working with Maven (Appendix)</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/wicketstuff.html"><strong>27</strong><span>Project WicketStuff (Appendix)</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/redirects.html"><strong>28</strong><span>Lost In Redirection With Apache Wicket (Appendix)</span></a> + </div> + + <div class="toc-item" style="margin-left:0"><a href="../../guide/contributing.html"><strong>29</strong><span>Contributing to this guide (Appendix)</span></a> + </div> + + </div> + </div> + </li> + <li class="separator selected"> + <a id="ref-button" onclick="localToggle(); return false;" href="#">Quick Reference</a> + </li> + </ul> +</div> +<div id="header"> + <div class="images clearfix"> + + <span id="logo"><a href="/" target="_blank"><img height="80px" src="http://wicket.apache.org/guide/img/apache-wicket.png"/></a></span> + + + <span id="sponsor"><a href="http://www.apache.org/"; target="_blank"><img height="60px" src="http://wicket.apache.org/guide/img/asf_logo.gif"/></a></span> + + </div> + <p>Free Online Guide for Apache Wicket framework</p> +</div> + + +<table id="colset" border="0" cellpadding="0" cellspacing="0"> + <tr> + <td id="col1"> + <div id="main" class="corner-all"> + + + <div class="toc-item prev-left"><a href="../../guide/nativewebsockets.html"><< <strong>20</strong><span>Native WebSockets</span></a></div> + + + <span id='toggle-col1' class="toggle">(<a href="#" onclick="localToggle(); return false;">Quick Reference</a>)</span> + + + <div class="toc-item next-right"><a href="../../guide/testing.html"><strong>22</strong><span>Test Driven Development with Wicket</span> >></a></div> + + + + <div class="project"> + <h1>21.6 Summary - Reference Documentation</h1> + + <p><strong>Authors:</strong> Andrea Del Bene, Martin Grigorov, Carsten Hufe, Christian Kroemer, Daniel Bartl, Paul BorÈ</p> + + <p><strong>Version:</strong> 6.x</p> + + + </div> + + + + + +<h2 id="security_6">21.6 Summary</h2> +<p class="paragraph"/> In this chapter we have seen the components and the mechanisms that allow us to implement security policies in our Wicket-based applications. Wicket comes with an out of the box support for both authorization and authentication.<p class="paragraph"/>The central element of authorization mechanism is the interface <code>IAuthorizationStrategy</code> which decouples our components from any detail about security strategy. The implementations of this interface must decide if a user is allowed to instantiate a given page or component and if she/he can perform a given action on it.<p class="paragraph"/>Wicket natively supports role-based authorizations with strategies <code>MetaDataRoleAuthorizationStrategy</code> and <code>AnnotationsRoleAuthorizationStrategy</code>. The difference between these two strategies is that the first offers a programmatic approach for role handling while the second promotes a declarative approach using built-in annotations.<p class="parag raph"/>After having explored how Wicket internally implements authentication and authorization, in the last part of the chapter we have learnt how to configure our applications to support HTTPS and how to specify which pages must be served over this protocol.<p class="paragraph"/>In the last paragraph we have seen how Wicket protects package resources with a guard entity that allows us to decide which package resources can be accessed from users.<p class="paragraph"/><p class="paragraph"/> + + + <div style="clear:both;margin-top:15px;"></div> + + <div class="toc-item prev-left"><a href="../../guide/nativewebsockets.html"><< <strong>20</strong><span>Native WebSockets</span></a></div> + + <div class="toc-item next-right"><a href="../../guide/testing.html"><strong>22</strong><span>Test Driven Development with Wicket</span> >></a></div> + + <div style="clear:both"></div> + </div> + </td> + <td id="col2"> + <div class="local clearfix"> + <div class="local-title"> + <a href="../../guide/index.html" target="mainFrame">Quick Reference</a> + <span class="toggle">(<a href="#" onclick="localToggle(); return false;">hide</a>)</span> + </div> + <div class="menu"> + + </div> + </div> + </td> + </tr> +</table> + +<div id="footer"> + +Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> + + +</div> + +<script type="text/javascript" src="../js/docs.js"></script> + +</body> +</html> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testing_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testing_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testing_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testing_1.html Tue Feb 3 11:19:18 2015 @@ -322,7 +322,7 @@ After a test method has been executed, w <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testing_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testing_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testing_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testing_2.html Tue Feb 3 11:19:18 2015 @@ -242,7 +242,7 @@ formTester.submit(<span class="java- <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testing_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testing_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testing_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testing_3.html Tue Feb 3 11:19:18 2015 @@ -217,7 +217,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testing_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testing_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testing_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testing_4.html Tue Feb 3 11:19:18 2015 @@ -192,7 +192,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testingspring_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testingspring_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testingspring_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testingspring_1.html Tue Feb 3 11:19:18 2015 @@ -236,7 +236,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testingspring_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testingspring_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testingspring_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testingspring_2.html Tue Feb 3 11:19:18 2015 @@ -253,7 +253,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/testingspring_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/testingspring_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/testingspring_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/testingspring_3.html Tue Feb 3 11:19:18 2015 @@ -192,7 +192,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_1.html Tue Feb 3 11:19:18 2015 @@ -218,7 +218,7 @@ pageParameters.get(1);</pre></div><p cla <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_2.html Tue Feb 3 11:19:18 2015 @@ -192,7 +192,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_3.html Tue Feb 3 11:19:18 2015 @@ -228,7 +228,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_4.html Tue Feb 3 11:19:18 2015 @@ -199,7 +199,7 @@ add(<span class="java-keyword">new</ <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_5.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_5.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_5.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_5.html Tue Feb 3 11:19:18 2015 @@ -204,7 +204,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_6.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_6.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_6.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_6.html Tue Feb 3 11:19:18 2015 @@ -199,12 +199,15 @@ setResponsePage(MountedPageWithPlacehold pageParameters.add(<span class="java-quote">"foo"</span>, <span class="java-quote">"foo"</span>); pageParameters.add(<span class="java-quote">"bar"</span>, <span class="java-quote">"bar"</span>);<p class="paragraph"/> setResponsePage(MountedPage.class, pageParameters); } -});</pre></div><p class="paragraph"/>Generated URL:<p class="paragraph"/><div class="code"><pre><Application path>/mountedPath/foo/foo/bar/bar?1</pre></div><p class="paragraph"/><h3>Encrypting page URLs</h3><p class="paragraph"/>Sometimes URLs are a doubleâedged sword for our site because they can expose too many details about the internal structure of our web application and malicious users could exploit them to perform a <a href="http://en.wikipedia.org/wiki/Cross-site_request_forgery"; target="blank">cross-site request forgery</a> .<p class="paragraph"/>To avoid this kind of security threat we can use the CryptoMapper request mapper which wraps an existing mapper and encrypts the original URL producing a single encrypted segment:<p class="paragraph"/><img border="0" class="center" src="../img/url-encrypted.png"></img><p class="paragraph"/>Typically, CryptoMapper is registered into a Wicket application as the root request mapper wrapping the default one:<p class=" paragraph"/><div class="code"><pre>@Override +});</pre></div><p class="paragraph"/>Generated URL:<p class="paragraph"/><div class="code"><pre><Application path>/mountedPath/foo/foo/bar/bar?1</pre></div><p class="paragraph"/><h3>Encrypting page URLs</h3><p class="paragraph"/>Sometimes URLs are a doubleâedged sword for our site because they can expose too many details about the internal structure of our web application making it more vulnerable to malicious users.<p class="paragraph"/>To avoid this kind of security threat we can use the <code>CryptoMapper</code> request mapper which wraps an existing mapper and encrypts the original URL producing a single encrypted segment:<p class="paragraph"/><img border="0" class="center" src="../img/url-encrypted.png"></img><p class="paragraph"/>Typically, <code>CryptoMapper</code> is registered into a Wicket application as the root request mapper wrapping the default one:<p class="paragraph"/><div class="code"><pre>@Override <span class="java-keyword">public</span> void init() { <span class="java-keyword">super</span>.init(); setRootRequestMapper(<span class="java-keyword">new</span> CryptoMapper(getRootRequestMapper(), <span class="java-keyword">this</span>)); //pages and resources must be mounted after we have set CryptoMapper - mountPage(<span class="java-quote">"/foo/"</span>, HomePage.class);</pre></div><p class="paragraph"/>As pointed out in the code above, pages and resources must be mounted after having set CryptoMapper as root mapper, otherwise the mounted paths will not work. + mountPage(<span class="java-quote">"/foo/"</span>, HomePage.class);</pre></div><p class="paragraph"/>As pointed out in the code above, pages and resources must be mounted after having set <code>CryptoMapper</code> as root mapper, otherwise the mounted paths will not work.<p class="paragraph"/><blockquote class="warning"> +By default <code>CryptoMapper</code> encrypts page URLs with a cipher that might not be strong enough for production environment. Paragraph 21.4 will provide a more detailed description of how Wicket encrypts page URLs and we will see how to use stronger ciphers. +</blockquote> + <div style="clear:both;margin-top:15px;"></div> @@ -233,7 +236,7 @@ setResponsePage(MountedPageWithPlacehold <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/urls_7.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/urls_7.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/urls_7.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/urls_7.html Tue Feb 3 11:19:18 2015 @@ -192,7 +192,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_1.html Tue Feb 3 11:19:18 2015 @@ -194,7 +194,7 @@ Stateless pages are never versioned and <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_2.html Tue Feb 3 11:19:18 2015 @@ -183,12 +183,12 @@ For more details about page storing you </blockquote><p class="paragraph"/>As we have stated at the beginning of this chapter, page versions are stored using Java serialization, therefore every object referenced inside a page must be serializable. In paragraph 9.6 we will see how to overcome this limit and work with non-serializable objects in our components using detachable Wicket models.<p class="paragraph"/><h3>Using a specific page version with PageReference</h3><p class="paragraph"/>To retrieve a specific page version in our code we can use class <code>org.apache.wicket.PageReference</code> by providing its constructor with the corresponding page id:<p class="paragraph"/><div class="code"><pre>//load page version with page id = 3 PageReference pageReference = <span class="java-keyword">new</span> PageReference(3); //load the related page instance -Page page = pageReference.getPage();</pre></div><p class="paragraph"/>To get the related page instance we must use method getPage.<p class="paragraph"/><h3>Turning off page versioning</h3><p class="paragraph"/>If for any reason we need to switch off versioning for a given page, we can call its method setVersioned(false).<p class="paragraph"/><h3>Pluggable serialization</h3><p class="paragraph"/>Starting from version 1.5 it is possible to choose which implementation of Java serialization will be used by Wicket to store page versions. Wicket serializes pages using an implementation of interface <code>org.apache.wicket.serialize.ISerializer</code>. The default implementation is <code>org.apache.wicket.serialize.java.JavaSerializer</code> and it uses the standard Java serialization mechanism based on classes ObjectOutputStream and ObjectInputStream. However on Internet we can find other interesting serialization libraries like Kryo1 which performs faster then the standard implementation .The serializer in use can be customized with the setSerializer(ISerializer) method defined by setting interface <code>org.apache.wicket.settings.IFrameworkSettings</code>.<p class="paragraph"/>We can access this interface inside the method init of the class Application using the getFrameworkSettings() method :<p class="paragraph"/><div class="code"><pre>@Override +Page page = pageReference.getPage();</pre></div><p class="paragraph"/>To get the related page instance we must use method getPage.<p class="paragraph"/><h3>Turning off page versioning</h3><p class="paragraph"/>If for any reason we need to switch off versioning for a given page, we can call its method setVersioned(false).<p class="paragraph"/><h3>Pluggable serialization</h3><p class="paragraph"/>Starting from version 1.5 it is possible to choose which implementation of Java serialization will be used by Wicket to store page versions. Wicket serializes pages using an implementation of interface <code>org.apache.wicket.serialize.ISerializer</code>. The default implementation is <code>org.apache.wicket.serialize.java.JavaSerializer</code> and it uses the standard Java serialization mechanism based on classes ObjectOutputStream and ObjectInputStream. However on Internet we can find other interesting serialization libraries like <a href="https://github.com/EsotericSoftware/kryo"; target="b lank">Kryo</a> or <a href="http://ruedigermoeller.github.io/fast-serialization/"; target="blank">Fast</a> which perform faster then the standard implementation. The serializer in use can be customized with the setSerializer(ISerializer) method defined by setting interface <code>org.apache.wicket.settings.IFrameworkSettings</code>.<p class="paragraph"/>We can access this interface inside the method init of the class Application using the getFrameworkSettings() method :<p class="paragraph"/><div class="code"><pre>@Override <span class="java-keyword">public</span> void init() { <span class="java-keyword">super</span>.init(); getFrameworkSettings().setSerializer(yourSerializer); -}</pre></div><p class="paragraph"/>A serializer based on Kryo library is provided by the WicketStuff project. You can find more information on this project, as well as the instructions to use its modules, in Appendix B.<p class="paragraph"/><h3>Page caching</h3><p class="paragraph"/>By default Wicket persists versions of pages into a session-relative file on disk, but it uses a two-levels cache to speed up this process. The first level of the cache uses a http session attribute called âwicket:persistentPageManagerData-<APPLICATION_NAME>â to store pages. The second level cache stores pages into application-scoped variables which are identified by a session id and a page id.<p class="paragraph"/>The following picture is an overview of these two caching levels:<p class="paragraph"/><img border="0" class="center" src="../img/wicket-cache.png"></img><p class="paragraph"/>The session-scoped cache is faster then the other memory levels but it contains only the pages used to serve the last request. Wicket allows us to set the maximum amount of memory allowed for the application-scoped cache and for the page store file. Both parameters can be configured via setting interface <code>org.apache.wicket.settings.IStoreSettings</code>.<p class="paragraph"/>This interface provides the setMaxSizePerSession(Bytes bytes) method to set the size for page store file. The Bytes parameter is the maximum size allowed for this file:<p class="paragraph"/><div class="code"><pre>@Override +}</pre></div><p class="paragraph"/>A serializer based on Kryo library and another one based on Fast are provided by the WicketStuff project. You can find more information on this project, as well as the instructions to use its modules, in Appendix B.<p class="paragraph"/><h3>Page caching</h3><p class="paragraph"/>By default Wicket persists versions of pages into a session-relative file on disk, but it uses a two-levels cache to speed up this process. The first level of the cache uses a http session attribute called âwicket:persistentPageManagerData-<APPLICATION_NAME>â to store pages. The second level cache stores pages into application-scoped variables which are identified by a session id and a page id.<p class="paragraph"/>The following picture is an overview of these two caching levels:<p class="paragraph"/><img border="0" class="center" src="../img/wicket-cache.png"></img><p class="paragraph"/>The session-scoped cache is faster then the other memory levels but it contains only the pages used to serve the last request. Wicket allows us to set the maximum amount of memory allowed for the application-scoped cache and for the page store file. Both parameters can be configured via setting interface <code>org.apache.wicket.settings.IStoreSettings</code>.<p class="paragraph"/>This interface provides the setMaxSizePerSession(Bytes bytes) method to set the size for page store file. The Bytes parameter is the maximum size allowed for this file:<p class="paragraph"/><div class="code"><pre>@Override <span class="java-keyword">public</span> void init() { <span class="java-keyword">super</span>.init(); @@ -235,7 +235,7 @@ For the second level cache we can use th <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_3.html Tue Feb 3 11:19:18 2015 @@ -215,7 +215,7 @@ Page '<page class>' is not state <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/versioningCaching_4.html Tue Feb 3 11:19:18 2015 @@ -192,7 +192,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_1.html Tue Feb 3 11:19:18 2015 @@ -193,7 +193,7 @@ However, none of these frameworks offers <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_2.html Tue Feb 3 11:19:18 2015 @@ -199,7 +199,7 @@ This approach is very similar to what GU <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_3.html Tue Feb 3 11:19:18 2015 @@ -198,7 +198,7 @@ Let's quickly review the main advantages <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/whyLearn_4.html Tue Feb 3 11:19:18 2015 @@ -199,7 +199,7 @@ Wicket is not the only component oriente <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_1.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_1.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_1.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_1.html Tue Feb 3 11:19:18 2015 @@ -197,7 +197,7 @@ Every WicketStuff module can be download <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_2.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_2.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_2.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_2.html Tue Feb 3 11:19:18 2015 @@ -216,7 +216,7 @@ textArea.add(<span class="java-keywo <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_3.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_3.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_3.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_3.html Tue Feb 3 11:19:18 2015 @@ -207,7 +207,7 @@ function addJsClass() { <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_4.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_4.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_4.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_4.html Tue Feb 3 11:19:18 2015 @@ -201,7 +201,7 @@ add(<span class="java-keyword">new</ <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_5.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_5.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_5.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_5.html Tue Feb 3 11:19:18 2015 @@ -200,7 +200,7 @@ add(grid);</pre></div><p class="paragrap <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div> Modified: wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_6.html URL: http://svn.apache.org/viewvc/wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_6.html?rev=1656683&r1=1656682&r2=1656683&view=diff ============================================================================== --- wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_6.html (original) +++ wicket/common/site/trunk/_site/guide/guide/pages/wicketstuff_6.html Tue Feb 3 11:19:18 2015 @@ -216,7 +216,7 @@ To write/read objects to response/from r <div id="footer"> Copyright © 2013-2014 â <a href="http://www.apache.org/"; target="_blank">The Apache Software Foundation</a> - â <b style="color:#E8590A !important;">(Generated on: 2014-11-11)</b> + â <b style="color:#E8590A !important;">(Generated on: 2015-02-03)</b> </div>
![http://wicket.apache.org/guide/img/apache-wicket.png"/](http://wicket.apache.org/guide/img/apache-wicket.png"/){kind=link}
![http://wicket.apache.org/guide/img/asf_logo.gif"/](http://wicket.apache.org/guide/img/asf_logo.gif"/){kind=link}