http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-02-15-wicket-6.6.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-02-15-wicket-6.6.0-released.md b/_posts/2013/2013-02-15-wicket-6.6.0-released.md new file mode 100644 index 0000000..d566e20 --- /dev/null +++ b/_posts/2013/2013-02-15-wicket-6.6.0-released.md @@ -0,0 +1,110 @@ +--- +layout: post +title: Apache Wicket 6.6.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.6.0! + +This release marks the sixth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +### New and noteworthy + +#### wicket:for attribute for html label tags + +While already available for some time, the wicket-1.5.xsd now contains +a valid definition for the `wicket:for` attribute such that it + +> Can be used in HTML `<label>` element to automatically link it +> to a form element. The value of this attribute must have the same value of +> the form component's wicket:id attribute. + +So you can use the following markup: + +{% highlight html %} +<label wicket:for="someinput">Some label</label> +<input wicket:id="someinput" type="text"> +{% endhighlight %} + +#### Added a callback for an invalidated session + +Session is extended with a life cycle event called `onInvalidate()`. +This method is executed when the user session is invalidated either +by explicit call to `org.apache.wicket.Session#invalidate()` or due +to HttpSession expiration. + +In case of session expiration this method is called in a non-worker +thread, i.e. there are no thread locals exported for the Application, +RequestCycle and Session. The Session is the current instance. The +Application can be found by using `Application#get(String)`. There is +no way to get a reference to a RequestCycle. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.6.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.6.0](http://www.apache.org/dyn/closer.cgi/wicket/6.6.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.6.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.6.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + + * [http://s.apache.org/wicket-6.0-migration](http://s.apache.org/wicket-6.0-migration) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.6.0 + +#### Bugs + + * [WICKET-4723](https://issues.apache.org/jira/browse/WICKET-4723) - tracking id retrieved in AtmosphereBehavior#onRequest() is always 0 + * [WICKET-4724](https://issues.apache.org/jira/browse/WICKET-4724) - the option name "maxRequests" is wrong in jquery.wicketatmosphere.js + * [WICKET-4926](https://issues.apache.org/jira/browse/WICKET-4926) - CheckGroupSelector does not work in nested forms in modal windows + * [WICKET-4984](https://issues.apache.org/jira/browse/WICKET-4984) - Update quickstart info for changed workflow in IntelliJ idea + * [WICKET-4990](https://issues.apache.org/jira/browse/WICKET-4990) - Problem using AutoCompleteBehavior with AjaxFormComponentUpdatingBehavior("onchange") + * [WICKET-4998](https://issues.apache.org/jira/browse/WICKET-4998) - AjaxFormComponentUpdatingBehavior("onkeypress") is triggered when Enter is used on autocomplete list + * [WICKET-5011](https://issues.apache.org/jira/browse/WICKET-5011) - Allow Select to work with non-equals objects + * [WICKET-5013](https://issues.apache.org/jira/browse/WICKET-5013) - Wicket Enclosure fails with more than one component + * [WICKET-5014](https://issues.apache.org/jira/browse/WICKET-5014) - Changes in WicketObjects.sizeof(final Serializable object) clashes with `<header-contribution>` in AjaxResponse + * [WICKET-5019](https://issues.apache.org/jira/browse/WICKET-5019) - Handling of NO_MINIFIED_NAME in PackageResourceReference#internalGetMinifiedName() + * [WICKET-5020](https://issues.apache.org/jira/browse/WICKET-5020) - InlineEnclosureHandler always uses "wicket" namespace + * [WICKET-5024](https://issues.apache.org/jira/browse/WICKET-5024) - Global ajax event for precondition is not called + * [WICKET-5027](https://issues.apache.org/jira/browse/WICKET-5027) - FormTester#getInputValue() does not support Select/SelectOption nor other custom components + * [WICKET-5029](https://issues.apache.org/jira/browse/WICKET-5029) - Palette does not allow to turn off localization + * [WICKET-5031](https://issues.apache.org/jira/browse/WICKET-5031) - Upgrade bootstrap to 2.3 + * [WICKET-5035](https://issues.apache.org/jira/browse/WICKET-5035) - script tag with wicket:id does not throw exception if it was not added in the code + * [WICKET-5036](https://issues.apache.org/jira/browse/WICKET-5036) - Post Parameters are lost when continueToOriginalDestination() is called + * [WICKET-5040](https://issues.apache.org/jira/browse/WICKET-5040) - Session.exists() returns false when ThreadContext#session is not set to current session + +#### Improvement + + * [WICKET-4444](https://issues.apache.org/jira/browse/WICKET-4444) - Add a callback to the Session which is called when the HttpSession is invalidated + * [WICKET-4861](https://issues.apache.org/jira/browse/WICKET-4861) - Making MultiFileUploadField use HTML5 multiple attr & remove confusing fakepath + * [WICKET-4945](https://issues.apache.org/jira/browse/WICKET-4945) - Wicket-atmosphere filters should be functions on AtmosphereResource + * [WICKET-4946](https://issues.apache.org/jira/browse/WICKET-4946) - Allow passing parameters to atmosphere JS + * [WICKET-5003](https://issues.apache.org/jira/browse/WICKET-5003) - Add wicket:for attribute in wicket.xsd + * [WICKET-5006](https://issues.apache.org/jira/browse/WICKET-5006) - Improve null display value in AbstractSingleSelectChoice + * [WICKET-5010](https://issues.apache.org/jira/browse/WICKET-5010) - Improve wicket-ajax.js to be able to work with jQuery 1.9+ + * [WICKET-5016](https://issues.apache.org/jira/browse/WICKET-5016) - Updated Application_el.properties for 6.x + * [WICKET-5017](https://issues.apache.org/jira/browse/WICKET-5017) - BaseWicketTester#clickLink() doesn not serialize form to request for SubmitLink but does for AjaxSubmitLink + * [WICKET-5022](https://issues.apache.org/jira/browse/WICKET-5022) - Improve Application_es.properties + * [WICKET-5025](https://issues.apache.org/jira/browse/WICKET-5025) - Set the component as a context to the ajax listeners
http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-02-26-wicket-1.5.10-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-02-26-wicket-1.5.10-released.md b/_posts/2013/2013-02-26-wicket-1.5.10-released.md new file mode 100644 index 0000000..302bd59 --- /dev/null +++ b/_posts/2013/2013-02-26-wicket-1.5.10-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.10 released +--- + +This is the tenth maintenance release of the Wicket 1.5.x series. This release brings over 28 bug fixes and improvements. + +* [Git tag](https://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket-1.5.10) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12323510) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.10</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.10) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-03-03-cve-2012-5636.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-03-03-cve-2012-5636.md b/_posts/2013/2013-03-03-cve-2012-5636.md new file mode 100644 index 0000000..7fbaaac --- /dev/null +++ b/_posts/2013/2013-03-03-cve-2012-5636.md @@ -0,0 +1,25 @@ +--- +layout: post +title: CVE-2012-5636 - Apache Wicket XSS vulnerability +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.4.x, 1.5.x and 1.6.x + +Description: +It is possible for JavaScript statements to break out of a <script> tag in the rendered response. +This might pose a security threat if the written JavaScript contains user provided data. + +This vulnerability is fixed in +[Apache Wicket 6.4.0](https://wicket.apache.org/2012/12/14/wicket-6.4.0-released.html), +[Apache Wicket 1.5.10](https://wicket.apache.org/2013/02/26/wicket-1.5.10-released.html) and +Apache Wicket 1.4.22. + + +Credit: +This issue was reported by Michael Riedel. http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-04-12-wicket-6.7.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-04-12-wicket-6.7.0-released.md b/_posts/2013/2013-04-12-wicket-6.7.0-released.md new file mode 100644 index 0000000..45e95b6 --- /dev/null +++ b/_posts/2013/2013-04-12-wicket-6.7.0-released.md @@ -0,0 +1,157 @@ +--- +layout: post +title: Apache Wicket 6.7.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.7.0! + +This release marks the seventh minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development +of Wicket, and as such no API breaks are present in this release +compared to 6.0.0. + +### New and noteworthy + +#### webfonts are now supported + +Our resource guard that prevents access to classpath resources that +are not intended to be shared through the web server is a whitelist +of permissable resource extensions. Typically images, JavaScript +files, stylesheets are on the whitelist, but the file types for +webfonts were blocked. From Wicket 6.7 and onward you can now embed +webfonts with your components and link to them from your stylesheets. + +#### Render a page or component to a String + +One of the issues that keeps propping up on the user lists is the +ability to render a page or component to a String so that you can use +Wicket to render HTML email messages. Now you can use +[ComponentRenderer](http://ci.apache.org/projects/wicket/apidocs/6.0.x/org/apache/wicket/core/util/string/ComponentRenderer.html) to +actually do so without having to resort to other less obvious methods. + +ComponentRenderer exposes two methods: `renderComponent` and +`renderPage` and they do exactly what their names suggest. Happy +emailing! + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.7.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.7.0](http://www.apache.org/dyn/closer.cgi/wicket/6.7.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.7.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.7.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + + * [http://s.apache.org/wicket-6.0-migration](http://s.apache.org/wicket-6.0-migration) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.7.0 + +#### Bug + + * [WICKET-4658](https://issues.apache.org/jira/browse/WICKET-4658) - TabbedPanel CSS "last" is wrong if last step is not visible + * [WICKET-4803](https://issues.apache.org/jira/browse/WICKET-4803) - UrlDecoder should log a message when invalid input is provided + * [WICKET-4871](https://issues.apache.org/jira/browse/WICKET-4871) - wicket-atmosphere version mismatch with wicket-example-jar + * [WICKET-4893](https://issues.apache.org/jira/browse/WICKET-4893) - AutoCompleteTextField removes DropDownChoice from Page + * [WICKET-4903](https://issues.apache.org/jira/browse/WICKET-4903) - relativeUrl's begins with ./ + * [WICKET-4907](https://issues.apache.org/jira/browse/WICKET-4907) - UrlResourceReference generates broken relative URLs + * [WICKET-4942](https://issues.apache.org/jira/browse/WICKET-4942) - Double slash '//' in starting url makes Url.parse output a relative Url + * [WICKET-4989](https://issues.apache.org/jira/browse/WICKET-4989) - WicketTester should send copies of its cookies + * [WICKET-4995](https://issues.apache.org/jira/browse/WICKET-4995) - Using CryptoMapper causes page to render twice + * [WICKET-5039](https://issues.apache.org/jira/browse/WICKET-5039) - Manual invocation of FunctionsExecutor#notify() is broken + * [WICKET-5041](https://issues.apache.org/jira/browse/WICKET-5041) - DefaultCssAutoCompleteTextField should have Constructor (String id) + * [WICKET-5044](https://issues.apache.org/jira/browse/WICKET-5044) - Atmosphere + DateLabel + * [WICKET-5045](https://issues.apache.org/jira/browse/WICKET-5045) - Upgrade Atmosphere to 1.0.10 + * [WICKET-5047](https://issues.apache.org/jira/browse/WICKET-5047) - Wicket Ajax: Inline script header contribution issue + * [WICKET-5048](https://issues.apache.org/jira/browse/WICKET-5048) - Inline enclosures don't work with different namespace + * [WICKET-5049](https://issues.apache.org/jira/browse/WICKET-5049) - Wicket Session may be null in SessionBindingListener after deserialization + * [WICKET-5052](https://issues.apache.org/jira/browse/WICKET-5052) - @SpringBean fails to invoke methods on bean with non-public methods + * [WICKET-5053](https://issues.apache.org/jira/browse/WICKET-5053) - "random" parameters is now "_" with jQuery Ajax + * [WICKET-5054](https://issues.apache.org/jira/browse/WICKET-5054) - Possible bug in org.apache.wicket.util.lang.Packages when building path with repeating names + * [WICKET-5055](https://issues.apache.org/jira/browse/WICKET-5055) - AutoComplete still triggers redundant events to registered change listener + * [WICKET-5061](https://issues.apache.org/jira/browse/WICKET-5061) - EnclosureHandler ignores wicket:xyz elements as children + * [WICKET-5067](https://issues.apache.org/jira/browse/WICKET-5067) - SelectOptions fails to render text on openClose tag + * [WICKET-5072](https://issues.apache.org/jira/browse/WICKET-5072) - Cookies#isEqual(Cookie, Cookie) may fail with NullPointerException + * [WICKET-5073](https://issues.apache.org/jira/browse/WICKET-5073) - UrlRenderer#removeCommonPrefixes() fails when contextPath+filterPrefix has more segments than the argument + * [WICKET-5075](https://issues.apache.org/jira/browse/WICKET-5075) - When modal window is closed page scrolls to top + * [WICKET-5076](https://issues.apache.org/jira/browse/WICKET-5076) - form#onSubmit() is called on just replaced nested forms + * [WICKET-5078](https://issues.apache.org/jira/browse/WICKET-5078) - RestartResponseException broken with page instance and bookmarkable page + * [WICKET-5080](https://issues.apache.org/jira/browse/WICKET-5080) - FilterToolbar.html contains javascript that is used elsewhere + * [WICKET-5082](https://issues.apache.org/jira/browse/WICKET-5082) - Ajax update renders parent/child JS in different order than initial Page render + * [WICKET-5085](https://issues.apache.org/jira/browse/WICKET-5085) - InlineEnclosure are piling up on each render + * [WICKET-5086](https://issues.apache.org/jira/browse/WICKET-5086) - FormTester throws an exception when a Palette component is added to a Form associated with a compound property model + * [WICKET-5093](https://issues.apache.org/jira/browse/WICKET-5093) - The event listener in Wicket.Ajax.ajax() should not return the value of attrs.ad (allowDefault) + * [WICKET-5094](https://issues.apache.org/jira/browse/WICKET-5094) - ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted bookmarkable pages + * [WICKET-5098](https://issues.apache.org/jira/browse/WICKET-5098) - PackageResourceBlockedException under Windows for \*\.js files in web app's own packages, not in jars + * [WICKET-5102](https://issues.apache.org/jira/browse/WICKET-5102) - wicket-bean-validation: Bean validation PropertyValidator only works with direct field access + * [WICKET-5103](https://issues.apache.org/jira/browse/WICKET-5103) - Wicket session id not up to date when container changes session id + * [WICKET-5104](https://issues.apache.org/jira/browse/WICKET-5104) - AjaxSelfUpdatingTimerBehavior in hidden component in ModalWindow causes Ajax Response Error + * [WICKET-5112](https://issues.apache.org/jira/browse/WICKET-5112) - Parantheses problem with UrlValidator + * [WICKET-5114](https://issues.apache.org/jira/browse/WICKET-5114) - Url#toString(StringMode.FULL) throws exception if a segment contains two dots + * [WICKET-5116](https://issues.apache.org/jira/browse/WICKET-5116) - TabbedPanel.setSelectedTab() does not behave as specified in JavaDoc + * [WICKET-5117](https://issues.apache.org/jira/browse/WICKET-5117) - Wicket ignores allowDefault:false attribute in multipart ajax requests + * [WICKET-5123](https://issues.apache.org/jira/browse/WICKET-5123) - Component.continueToOriginalDestination() can redirect to ./. + * [WICKET-5125](https://issues.apache.org/jira/browse/WICKET-5125) - IE8 error in wicket-date.js when used in a modalwindow + * [WICKET-5126](https://issues.apache.org/jira/browse/WICKET-5126) - SecurePackageResourceGuard is blocking access to web fonts + * [WICKET-5131](https://issues.apache.org/jira/browse/WICKET-5131) - Problems with cookies disabled when using 301/302 and also 303 (even with cookies) + * [WICKET-5132](https://issues.apache.org/jira/browse/WICKET-5132) - Evaluation of returned data (which includes alot of javascript) very slow after ajax call in IE10. + * [WICKET-5134](https://issues.apache.org/jira/browse/WICKET-5134) - java.lang.NullPointerException at org.apache.wicket.markup.html.form.Form.onComponentTag(Form.java:1520) during Atmosphere eventbus.post() if using WebSockets + * [WICKET-5136](https://issues.apache.org/jira/browse/WICKET-5136) - CheckingObjectOutputStream#check(Object) swallows Exception without logging the cause + * [WICKET-5138](https://issues.apache.org/jira/browse/WICKET-5138) - Wicket does not correctly handle http OPTIONS requests + * [WICKET-5141](https://issues.apache.org/jira/browse/WICKET-5141) - Exception while rendering absolute URL with UrlResourceReference + +#### Improvement + + * [WICKET-4115](https://issues.apache.org/jira/browse/WICKET-4115) - SignInPanel should not always redirect to the Home page when the user is signed-in automaticaly with the remember-me feature. + * [WICKET-5005](https://issues.apache.org/jira/browse/WICKET-5005) - Add Utility to allow conversion from Panel (or Component) to html String + * [WICKET-5038](https://issues.apache.org/jira/browse/WICKET-5038) - Add equals() and hashcode() implementation to INamedParameters.NamedPair + * [WICKET-5046](https://issues.apache.org/jira/browse/WICKET-5046) - NumberTextField should use appropriate validator + * [WICKET-5050](https://issues.apache.org/jira/browse/WICKET-5050) - AutoComplete should not request suggestions if input is no longer active element + * [WICKET-5057](https://issues.apache.org/jira/browse/WICKET-5057) - FilteringHeaderResponse requires a usage of FilteringHeaderResponse.IHeaderResponseFilter for no reason when FilteredHeaderItem is used + * [WICKET-5062](https://issues.apache.org/jira/browse/WICKET-5062) - Update the list of HTML void elements with the latest HTML5 ones + * [WICKET-5065](https://issues.apache.org/jira/browse/WICKET-5065) - Improve UrlRenderer to be able to render urls without scheme and/or host + * [WICKET-5066](https://issues.apache.org/jira/browse/WICKET-5066) - Allow PackageResource to decide itself whether it could be accepted or not + * [WICKET-5074](https://issues.apache.org/jira/browse/WICKET-5074) - Improvement for MockHttpServletRequest and FormTester to support 'multiple' input type of fileUpload + * [WICKET-5079](https://issues.apache.org/jira/browse/WICKET-5079) - Allow WebApplication-specific Spring configuration + * [WICKET-5088](https://issues.apache.org/jira/browse/WICKET-5088) - The Bootstrap class does not provide a handle for the CSSResourceReferences. + * [WICKET-5089](https://issues.apache.org/jira/browse/WICKET-5089) - Make MultiFileUploadField's ResourceReference JS public to be able to include in Application's getResourceBundles. + * [WICKET-5090](https://issues.apache.org/jira/browse/WICKET-5090) - Add path syntax to MarkupContainer#get( String ) + * [WICKET-5091](https://issues.apache.org/jira/browse/WICKET-5091) - Extract the short names of the ajax attributes as a constants + * [WICKET-5095](https://issues.apache.org/jira/browse/WICKET-5095) - Upgrade Wicket Native WebSocket to Jetty 9.0.0 + * [WICKET-5096](https://issues.apache.org/jira/browse/WICKET-5096) - Add setStep method to NumberTextField + * [WICKET-5105](https://issues.apache.org/jira/browse/WICKET-5105) - JavaDoc of IHeaderContributor is outdated + * [WICKET-5111](https://issues.apache.org/jira/browse/WICKET-5111) - Upgrade bootstrap to 2.3.1 + * [WICKET-5113](https://issues.apache.org/jira/browse/WICKET-5113) - Set a different TimeZone for the RequestLogger + * [WICKET-5121](https://issues.apache.org/jira/browse/WICKET-5121) - Log warning message if a component that is not on the page associated with the AjaxRequestTarget is added + * [WICKET-5122](https://issues.apache.org/jira/browse/WICKET-5122) - Add the free Wicket guide in the books page on the official site. + * [WICKET-5127](https://issues.apache.org/jira/browse/WICKET-5127) - Dont use sun-internal packages to allow easy jdk7 compilation + * [WICKET-5137](https://issues.apache.org/jira/browse/WICKET-5137) - Improve TagTester support for Ajax responses + * [WICKET-5139](https://issues.apache.org/jira/browse/WICKET-5139) - Missing French translations + +#### Task + + * [WICKET-5097](https://issues.apache.org/jira/browse/WICKET-5097) - Deprecate BaseWicketTester#startComponent(Component) + +#### Test + + * [WICKET-5042](https://issues.apache.org/jira/browse/WICKET-5042) - Cleanup FilteringHeaderResponseTest to make it more readable + \ No newline at end of file http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-05-17-wicket-6.8.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-05-17-wicket-6.8.0-released.md b/_posts/2013/2013-05-17-wicket-6.8.0-released.md new file mode 100644 index 0000000..1696001 --- /dev/null +++ b/_posts/2013/2013-05-17-wicket-6.8.0-released.md @@ -0,0 +1,87 @@ +--- +layout: post +title: Apache Wicket 6.8.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.8.0! + +This release marks the eighth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development +of Wicket, and as such no API breaks are present in this release +compared to 6.0.0. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.8.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.8.0](http://www.apache.org/dyn/closer.cgi/wicket/6.8.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.8.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.8.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + + * http://s.apache.org/wicket-6.0-migration + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.8.0 + +#### Sub-task + + * [WICKET-5162](https://issues.apache.org/jira/browse/WICKET-5162) - InlineEnclosure markup id could collide in the final page markup + * [WICKET-5185](https://issues.apache.org/jira/browse/WICKET-5185) - JavaScript text is spread in several DOM text nodes + +#### Bug + + * [WICKET-5083](https://issues.apache.org/jira/browse/WICKET-5083) - Page#isPageStateless() may return wrong value + * [WICKET-5103](https://issues.apache.org/jira/browse/WICKET-5103) - Wicket session id not up to date when container changes session id + * [WICKET-5119](https://issues.apache.org/jira/browse/WICKET-5119) - PopupSettings IE8 - dosen't work second time a link is clicked. + * [WICKET-5140](https://issues.apache.org/jira/browse/WICKET-5140) - InterceptData never gets cleared from session after continueToOriginalDestination is called and another page is requested afterwards + * [WICKET-5142](https://issues.apache.org/jira/browse/WICKET-5142) - Generating invalid JavaScript for ajax update + * [WICKET-5145](https://issues.apache.org/jira/browse/WICKET-5145) - do not post an Atmosphere event if the filtered subscription set is empty + * [WICKET-5146](https://issues.apache.org/jira/browse/WICKET-5146) - Application not destroyed if WicketFilter#init() fails + * [WICKET-5147](https://issues.apache.org/jira/browse/WICKET-5147) - WicketTester MockHttpRequest.getCookies very slow / OutOfMemory + * [WICKET-5149](https://issues.apache.org/jira/browse/WICKET-5149) - PageRequestHandlerTracker doesn't track resolves of handlers caused by Exception + * [WICKET-5154](https://issues.apache.org/jira/browse/WICKET-5154) - Positioning of autocomplete popup does not take into account borders + * [WICKET-5157](https://issues.apache.org/jira/browse/WICKET-5157) - URL query parameter values containing equals sign get cut off + * [WICKET-5163](https://issues.apache.org/jira/browse/WICKET-5163) - Implementing markup loading by extending ResourceStreamLocator produces errors with inherited markup + * [WICKET-5176](https://issues.apache.org/jira/browse/WICKET-5176) - StringResourceModel doesn't detach model in some cases + * [WICKET-5178](https://issues.apache.org/jira/browse/WICKET-5178) - StopPropagation functionality on link is broken + * [WICKET-5181](https://issues.apache.org/jira/browse/WICKET-5181) - Problem with OnEventHeaderItem and Wicket.Event.add + * [WICKET-5187](https://issues.apache.org/jira/browse/WICKET-5187) - Unknown tag name with Wicket namespace: 'panel' + * [WICKET-5191](https://issues.apache.org/jira/browse/WICKET-5191) - Session is created unnecessarily + +#### Improvement + + * [WICKET-5143](https://issues.apache.org/jira/browse/WICKET-5143) - Create an interface for the roles replacing the current Roles class + * [WICKET-5150](https://issues.apache.org/jira/browse/WICKET-5150) - Log additional info when FormComponent fails in updateCollectionModel + * [WICKET-5158](https://issues.apache.org/jira/browse/WICKET-5158) - Ignore missing Page in StatelessForm#process() + * [WICKET-5159](https://issues.apache.org/jira/browse/WICKET-5159) - Replace usage of JavaScript eval() with plain JS in headed contribution decoding + * [WICKET-5160](https://issues.apache.org/jira/browse/WICKET-5160) - Throttle the animation in DebugWindow when there are many errors + * [WICKET-5161](https://issues.apache.org/jira/browse/WICKET-5161) - The url gets longer when using StatelessForm with GET method + * [WICKET-5166](https://issues.apache.org/jira/browse/WICKET-5166) - Relax the requirements for using FilteringHeaderResponse + * [WICKET-5186](https://issues.apache.org/jira/browse/WICKET-5186) - Use arrays instead of String concatenation in JavaScript for better performance + * [WICKET-5188](https://issues.apache.org/jira/browse/WICKET-5188) - Use a separate logger for the extra information logged in RequestCycle#onException() + * [WICKET-5189](https://issues.apache.org/jira/browse/WICKET-5189) - preregister known wicket tag names + +#### Task + + * [WICKET-5169](https://issues.apache.org/jira/browse/WICKET-5169) - Create BuildBot config for wicket-6.x branch + \ No newline at end of file http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-06-27-wicket-6.9.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-06-27-wicket-6.9.0-released.md b/_posts/2013/2013-06-27-wicket-6.9.0-released.md new file mode 100644 index 0000000..b5e3ebf --- /dev/null +++ b/_posts/2013/2013-06-27-wicket-6.9.0-released.md @@ -0,0 +1,96 @@ +--- +layout: post +title: Apache Wicket 6.9.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.9.0! + +This release marks the ninth minor release of Wicket 6. Starting with +Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release +compared to 6.0.0. + +### New and noteworthy + +Switch between jQuery 1.x and 2.x depending on the user agent. For IE +6/7/8 jQuery ver. 1.x will be used, for any other browser - ver. 2.x. +To use this resource reference do in your application's init method: + +{% highlight java %} +protected void init() { + getJavaScriptLibrarySettings() + .setJQueryReference(DynamicJQueryResourceReference.INSTANCE); +} +{% endhighlight %} + +Upgraded Atmoshpere (1.0.13) and Bootstrap (2.3.2) resources. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.9.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.9.0](http://www.apache.org/dyn/closer.cgi/wicket/6.9.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.9.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.9.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + + * [Migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.9.0 + +#### Bug + + * [WICKET-4827](https://issues.apache.org/jira/browse/WICKET-4827) - Modal panel mouse pointer in resize style for MSIE8 and MSIE9 + * [WICKET-5056](https://issues.apache.org/jira/browse/WICKET-5056) - Page mount with an optional named parameter overtakes a mount with more specific path + * [WICKET-5071](https://issues.apache.org/jira/browse/WICKET-5071) - 404 Error on Nested ModalWindows in IE7 and IE8 + * [WICKET-5165](https://issues.apache.org/jira/browse/WICKET-5165) - Session should be bound when adding messages to it + * [WICKET-5194](https://issues.apache.org/jira/browse/WICKET-5194) - Adding AjaxFormValidatingBehavior to the form prevents form from being filled + * [WICKET-5200](https://issues.apache.org/jira/browse/WICKET-5200) - Upgrade atmosphere-runtime to 1.0.13 + * [WICKET-5202](https://issues.apache.org/jira/browse/WICKET-5202) - Page redirects can fail when using url encoding + * [WICKET-5203](https://issues.apache.org/jira/browse/WICKET-5203) - Base url is incorrect for error dispatched pages + * [WICKET-5204](https://issues.apache.org/jira/browse/WICKET-5204) - The DateTimeField.onBeforeRender() method does not format the fields correctly. + * [WICKET-5205](https://issues.apache.org/jira/browse/WICKET-5205) - AbstractAjaxBehavior.unbind does not clean stored reference to host component + * [WICKET-5209](https://issues.apache.org/jira/browse/WICKET-5209) - NPE when using ComponentRenderer.renderComponent on a panel with <wicket:enclosure> + * [WICKET-5218](https://issues.apache.org/jira/browse/WICKET-5218) - EnclosureContainer calls child#configure() way before rendering + * [WICKET-5220](https://issues.apache.org/jira/browse/WICKET-5220) - AjaxEditableLabel not working well in form + * [WICKET-5222](https://issues.apache.org/jira/browse/WICKET-5222) - Direct iframe removal not supported by Firefox: tab title stays as "Connecting" + * [WICKET-5223](https://issues.apache.org/jira/browse/WICKET-5223) - AjaxEditableLabel doesn't provide a way to configure Ajax attributes for its Ajax behaviors + * [WICKET-5226](https://issues.apache.org/jira/browse/WICKET-5226) - CDI integration fails in Glassfish 4.0 with WELD-000070 + * [WICKET-5230](https://issues.apache.org/jira/browse/WICKET-5230) - AjaxFormChoiceComponentUpdatingBehavior fails for choices containing other invalid FormComponents + * [WICKET-5234](https://issues.apache.org/jira/browse/WICKET-5234) - OnEventHeaderItem can't be applied via AJAX + * [WICKET-5237](https://issues.apache.org/jira/browse/WICKET-5237) - Wicket generates invalid HTML by expanding col tags + * [WICKET-5247](https://issues.apache.org/jira/browse/WICKET-5247) - Broken Link in Tomcat because of Page Mount + +#### Improvement + + * [WICKET-5199](https://issues.apache.org/jira/browse/WICKET-5199) - Component.getBehaviors(Class<M> type) documentation is obsolete + * [WICKET-5207](https://issues.apache.org/jira/browse/WICKET-5207) - Use documented jQuery APIs for triggering the special event 'inputchange' + * [WICKET-5208](https://issues.apache.org/jira/browse/WICKET-5208) - Contribute jQuery 1.x or 2.x depending on the user agent + * [WICKET-5210](https://issues.apache.org/jira/browse/WICKET-5210) - JQuery problem because component appears twice in DOM while Ajax refresh + * [WICKET-5211](https://issues.apache.org/jira/browse/WICKET-5211) - Make CryptoMapper extendable + * [WICKET-5215](https://issues.apache.org/jira/browse/WICKET-5215) - Better exception message when Page instantiation fails in DefaultPageFactory + * [WICKET-5219](https://issues.apache.org/jira/browse/WICKET-5219) - ServletWebResponse should call #setHeader() to set Ajax-Location for redirect + * [WICKET-5228](https://issues.apache.org/jira/browse/WICKET-5228) - Add method getFirstDayOfWeek to DatePicker class + * [WICKET-5232](https://issues.apache.org/jira/browse/WICKET-5232) - ComponentRenderer.renderComponent could accept components with any markupId, not just "compId" + * [WICKET-5233](https://issues.apache.org/jira/browse/WICKET-5233) - Component.getBehaviors() can be implemented slightly more efficiently + * [WICKET-5238](https://issues.apache.org/jira/browse/WICKET-5238) - Upgrade bootstrap from 2.3.1 to 2.3.2 http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-07-10-wicket-6.9.1-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-07-10-wicket-6.9.1-released.md b/_posts/2013/2013-07-10-wicket-6.9.1-released.md new file mode 100644 index 0000000..bce49cb --- /dev/null +++ b/_posts/2013/2013-07-10-wicket-6.9.1-released.md @@ -0,0 +1,95 @@ +--- +layout: post +title: Apache Wicket 6.9.1 released +--- + +The Apache Wicket PMC announces Apache Wicket 6.9.1! + +This is a patch release for 6.9.0 where we inadvertently broke CDI +injection into (amongst others) anonymous inner classes. See below +for more information regarding this release. + +Please note that this patch release **only** fixes WICKET-5264. + +Starting with Wicket 6 we use semantic versioning for the future +development of Wicket, and as such no API breaks are present in this +release compared to 6.0.0. + +### JQuery update in 6.9.0 + +As of Wicket 6.9 we ship JQuery 1.10.1. The JQuery project has +decided to remove deprecated APIs from their codebase from JQuery 1.9 +and up. This means that JQuery plugins using these deprecated APIs no +longer work. See the JQuery migration guide for more information, +available from http://jquery.com/upgrade-guide/1.9/ + +If your application depends on these deprecated APIs you can easily +downgrade to JQuery 1.8.3-the previously provided JQuery that still +contains these APIs. Download the 1.8.3 release of jquery and add it +to your project in its application's init method: + +{% highlight java %} +@Override +protected void init() { + getJavaScriptLibrarySettings() + .setJQueryReference(yourJquery183ResourceReference); +} +{% endhighlight %} + +### CDI injection issue + +In the CDI releases of Weld 2.0.1 and prior, it was assumed that +injection in anonymous inner classes was not legal and when +attempted, it resulted in an exception: + +{% highlight text %} +Caused by: org.jboss.weld.exceptions.DefinitionException: WELD-000070 +Simple bean [EnhancedAnnotatedTypeImpl] private class +com.example.HomePage$AForm cannot be a non-static inner class +{% endhighlight %} + +This was reported as +[WICKET-5226](https://issues.apache.org/jira/browse/WICKET-5226), as +it became an issue in Glassfish 4, which ships with Weld 2.0.1 (or +earlier). We implemented a fix for this particular issue by not +injecting into anonymous inner classes. + +Unfortunately this was not a bug that needed fixing on our part, but +rather in the Weld framework (see +[WELD-1441](https://issues.jboss.org/browse/WELD-1441)) + +Therefore we reverted the commits done for WICKET-5226 and hope that +Glassfish will upgrade their Weld implementation soon. For the whole +story read +[WICKET-5264](https://issues.apache.org/jira/browse/WICKET-5264) + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.9.1</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.9.1](http://www.apache.org/dyn/closer.cgi/wicket/6.9.1) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.9.1/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.9.1/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + + * [migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-08-18-wicket-6.10.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-08-18-wicket-6.10.0-released.md b/_posts/2013/2013-08-18-wicket-6.10.0-released.md new file mode 100644 index 0000000..74dc2af --- /dev/null +++ b/_posts/2013/2013-08-18-wicket-6.10.0-released.md @@ -0,0 +1,149 @@ +--- +layout: post +title: Apache Wicket 6.10.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.10.0! + +This release marks the tenth minor release of Wicket 6. Starting with +Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release +compared to 6.0.0. + +### New and noteworthy + +* Required text form components now emit the HTML5 required attribute + +* URLs with username/passwords in them will now be parsed correctly + http://me:secret@localhost and http://me:secret@localhost:8080 will + no longer trigger an invalid number exception + +* OnEventHeaderItem uses JavaScript event registration, instead of + inline DOM attributes, so it should remove 'on' prefixes when it is + provided by the user application. For example: onclick => click. + +### JQuery update in 6.9.0 + +As of Wicket 6.9 we ship JQuery 1.10.1. The JQuery project has +decided to remove deprecated APIs from their codebase from JQuery 1.9 +and up. This means that JQuery plugins using these deprecated APIs no +longer work. See the JQuery migration guide for more information, +available from http://jquery.com/upgrade-guide/1.9/ + +If your application depends on these deprecated APIs you can easily +downgrade to JQuery 1.8.3-the previously provided JQuery that still +contains these APIs. Download the 1.8.3 release of jquery and add it +to your project in its application's init method: + +{% highlight java %} +@Override +protected void init() { + getJavaScriptLibrarySettings() + .setJQueryReference(yourJquery183ResourceReference); +} +{% endhighlight %} + +### CDI injection issue + +In the CDI releases of Weld 2.0.1 and prior, it was assumed that +injection in anonymous inner classes was not legal and when +attempted, it resulted in an exception: + +{% highlight text %} +Caused by: org.jboss.weld.exceptions.DefinitionException: WELD-000070 +Simple bean [EnhancedAnnotatedTypeImpl] private class +com.example.HomePage$AForm cannot be a non-static inner class +{% endhighlight %} + +This was reported as +[WICKET-5226](https://issues.apache.org/jira/browse/WICKET-5226), as +it became an issue in Glassfish 4, which ships with Weld 2.0.1 (or +earlier). We implemented a fix for this particular issue by not +injecting into anonymous inner classes. + +Unfortunately this was not a bug that needed fixing on our part, but +rather in the Weld framework (see +[WELD-1441](https://issues.jboss.org/browse/WELD-1441)) + +Therefore we reverted the commits done for WICKET-5226 and hope that +Glassfish will upgrade their Weld implementation soon. For the whole +story read +[WICKET-5264](https://issues.apache.org/jira/browse/WICKET-5264) + + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.10.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.10.0](http://www.apache.org/dyn/closer.cgi/wicket/6.10.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.10.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.10.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + + * [Migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.10.0 + +#### Sub-task + +* [WICKET-5248](https://issues.apache.org/jira/browse/WICKET-5248) - OnEventHeaderItem is still broken in 6.9.0 + +#### Bug + +* [WICKET-5135](https://issues.apache.org/jira/browse/WICKET-5135) - wicket-atmosphere EventBus constructor throws NullPointerException under invalid state +* [WICKET-5164](https://issues.apache.org/jira/browse/WICKET-5164) - PageStoreManager.SessionEntry keeps outdated sessionId when container changes sessionId +* [WICKET-5224](https://issues.apache.org/jira/browse/WICKET-5224) - ModalWindow is not visible in Safari when opened from a link at the bottom of a large page +* [WICKET-5250](https://issues.apache.org/jira/browse/WICKET-5250) - Minified css/js gets compressed +* [WICKET-5251](https://issues.apache.org/jira/browse/WICKET-5251) - Minified name resolves incorrectly if default resource reference is used +* [WICKET-5256](https://issues.apache.org/jira/browse/WICKET-5256) - Allow configuring the resource used by ResourceStreamRequestHandler +* [WICKET-5259](https://issues.apache.org/jira/browse/WICKET-5259) - Url can't parse urls with username and password +* [WICKET-5260](https://issues.apache.org/jira/browse/WICKET-5260) - UrlRenderer#renderUrl() doesn't preserve the host +* [WICKET-5263](https://issues.apache.org/jira/browse/WICKET-5263) - FilenameWithVersionResourceCachingStrategy breaks silently when the versionPrefix is contained in the original filename +* [WICKET-5266](https://issues.apache.org/jira/browse/WICKET-5266) - Issue with TomcatWebSocketFilter and Spring Security +* [WICKET-5268](https://issues.apache.org/jira/browse/WICKET-5268) - ComponentRenderer.renderComponent fails to render two components with different component IDs +* [WICKET-5269](https://issues.apache.org/jira/browse/WICKET-5269) - XmlAjaxResponse restores wrong response +* [WICKET-5272](https://issues.apache.org/jira/browse/WICKET-5272) - NPE on unmount in BookmarkableMapper.java:189 +* [WICKET-5273](https://issues.apache.org/jira/browse/WICKET-5273) - Tabindex overwritten in modal window for IE - Works in FF, Chrome +* [WICKET-5279](https://issues.apache.org/jira/browse/WICKET-5279) - o.a.w.a.AtmosphereBehavior onBroadcast should log DEBUG, not INFO +* [WICKET-5287](https://issues.apache.org/jira/browse/WICKET-5287) - NumberFormatException when parsing the port from Requests with invalid URIs +* [WICKET-5291](https://issues.apache.org/jira/browse/WICKET-5291) - Dependencies of Resource Bundle References are ignored +* [WICKET-5294](https://issues.apache.org/jira/browse/WICKET-5294) - MarkupCache ignores enforceReload flag +* [WICKET-5298](https://issues.apache.org/jira/browse/WICKET-5298) - Wicket Example for effects with Prototype is broken +* [WICKET-5300](https://issues.apache.org/jira/browse/WICKET-5300) - ComponentRenderingRequestHandler does not clear renderedComponents (PrototypeApplication) +* [WICKET-5302](https://issues.apache.org/jira/browse/WICKET-5302) - Using InlineEnclosure leads to two re-renderings of the controlling child component +* [WICKET-5306](https://issues.apache.org/jira/browse/WICKET-5306) - Dynamic and static extra paramaters not evaluated in ajax submitting behavior in a multipart form +* [WICKET-5309](https://issues.apache.org/jira/browse/WICKET-5309) - No page id appended to some stateful pages using repeaters +* [WICKET-5310](https://issues.apache.org/jira/browse/WICKET-5310) - if wicket is an external lib, BundleStringResourceLoader doesn't work + +#### Improvement + +* [WICKET-4993](https://issues.apache.org/jira/browse/WICKET-4993) - Add a minInputLength parameter to AutoCompleteTextField +* [WICKET-5270](https://issues.apache.org/jira/browse/WICKET-5270) - Do not set the location.hash when clicking on a link +* [WICKET-5276](https://issues.apache.org/jira/browse/WICKET-5276) - JavaDoc & API for IConverter +* [WICKET-5277](https://issues.apache.org/jira/browse/WICKET-5277) - PropertiesFactory - customizable properties loading +* [WICKET-5289](https://issues.apache.org/jira/browse/WICKET-5289) - setRequired(true) should add the HTML5 "required" attribute on <input> and <textarea> elements +* [WICKET-5295](https://issues.apache.org/jira/browse/WICKET-5295) - UrlResourceStream#getData content-type detection relies on flawed logic in URLConnection#getContentType +* [WICKET-5296](https://issues.apache.org/jira/browse/WICKET-5296) - OnEventHeaderItem should remove 'on' prefix for the event name +* [WICKET-5303](https://issues.apache.org/jira/browse/WICKET-5303) - Static id counter AbstractToolbar prevents stable component paths for testing +* [WICKET-5304](https://issues.apache.org/jira/browse/WICKET-5304) - AbstractResource should check for error code first before for modifications +* [WICKET-5307](https://issues.apache.org/jira/browse/WICKET-5307) - Export resources' version cache attribute as request cycle metadata http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-09-20-wicket-6.11.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-09-20-wicket-6.11.0-released.md b/_posts/2013/2013-09-20-wicket-6.11.0-released.md new file mode 100644 index 0000000..ad6048d --- /dev/null +++ b/_posts/2013/2013-09-20-wicket-6.11.0-released.md @@ -0,0 +1,152 @@ +--- +layout: post +title: Apache Wicket 6.11.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.11.0! + +This release marks the eleventh minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development +of Wicket, and as such no API breaks are present in this release +compared to 6.0.0. + +### New and noteworthy + +#### New HTML5Attributes behavior + +HTML5 attribute support in Wicket continues to be improved upon. Add +the new HTML5Attributes behavior to your text fields or buttons and +Wicket will add the relevant HTML5 attributes based on the state of +your components: + + - adds "required" if your form component is required + - adds "placeholder" for the label of your form component + - adds "pattern" if your form component has a PatternValidator + attached + - adds "formnovalidate" if your button has default form processing + set to false + +This behavior replaces the functionality from 6.10 where HTML5 +attributes were added automatically (see +[WICKET-5289](https://issues.apache.org/jira/browse/WICKET-5289) and +[WICKET-5331](https://issues.apache.org/jira/browse/WICKET-5331)) + +#### BeanValidation receives french translation + +The BeanValidation project now has a french translation for +validation errors: + + - Le champ '${label}' ne doit pas être null + - Le champ '${label}' pourrait contenir du contenu HTML dangereux + +Bonne chance! + +### JQuery update in 6.9.0 + +As of Wicket 6.9 we ship JQuery 1.10.1. The JQuery project has +decided to remove deprecated APIs from their codebase from JQuery 1.9 +and up. This means that JQuery plugins using these deprecated APIs no +longer work. See the JQuery migration guide for more information, +available from http://jquery.com/upgrade-guide/1.9/ + +If your application depends on these deprecated APIs you can easily +downgrade to JQuery 1.8.3-the previously provided JQuery that still +contains these APIs. Download the 1.8.3 release of jquery and add it +to your project in its application's init method: + +{% highlight java %} + @Override + protected void init() { + getJavaScriptLibrarySettings() + .setJQueryReference(yourJquery183ResourceReference); + } +{% endhighlight %} + +### CDI injection issue + +In the CDI releases of Weld 2.0.1 and prior, it was assumed that +injection in anonymous inner classes was not legal and when +attempted, it resulted in an exception: + +{% highlight text %} +Caused by: org.jboss.weld.exceptions.DefinitionException: +WELD-000070 Simple bean [EnhancedAnnotatedTypeImpl] private class +com.example.HomePage$AForm cannot be a non-static inner class +{% endhighlight %} + +This was reported as +[WICKET-5226](https://issues.apache.org/jira/browse/WICKET-5226), as +it became an issue in Glassfish 4, which ships with Weld 2.0.1 (or +earlier). We implemented a fix for this particular issue by not +injecting into anonymous inner classes. + +Unfortunately this was not a bug that needed fixing on our part, but +rather in the Weld framework (see +[WELD-1441](https://issues.jboss.org/browse/WELD-1441)) + +Therefore we reverted the commits done for WICKET-5226 and hope that +Glassfish will upgrade their Weld implementation soon. For the whole +story read +[WICKET-5264](https://issues.apache.org/jira/browse/WICKET-5264) + +Glassfish has fixed this in trunk according to +[GLASSFISH-20619](https://java.net/jira/browse/GLASSFISH-20619) but +the fix has yet to be integrated into a release. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.11.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.11.0](http://www.apache.org/dyn/closer.cgi/wicket/6.11.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.11.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.11.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + +* [Migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.11.0 + +#### Bug + + * [WICKET-5313](https://issues.apache.org/jira/browse/WICKET-5313) - Wrong HTML attribute used in SizeTagModifier (wicket-bean-validation) + * [WICKET-5315](https://issues.apache.org/jira/browse/WICKET-5315) - PriorityHeaderItem+OnDomReadyHeaderItem has no priority in Ajax response + * [WICKET-5316](https://issues.apache.org/jira/browse/WICKET-5316) - Wicket Atmosphere CouldNotLockPageException + * [WICKET-5319](https://issues.apache.org/jira/browse/WICKET-5319) - CryptoMapper encrypts external URLs in ResourceReferences making the resources inaccessible + * [WICKET-5322](https://issues.apache.org/jira/browse/WICKET-5322) - "Source code" link doesn't work at wicket-library.com + * [WICKET-5325](https://issues.apache.org/jira/browse/WICKET-5325) - ComponentRenderer.renderComponent does not render markup for ListView + * [WICKET-5329](https://issues.apache.org/jira/browse/WICKET-5329) - "Required" flag initialized too early in PropertyValidator + * [WICKET-5332](https://issues.apache.org/jira/browse/WICKET-5332) - Autocomplete throws error when initialized in an AjaxLazyLoadPanel + * [WICKET-5334](https://issues.apache.org/jira/browse/WICKET-5334) - KittenCaptcha example is broken in IE10 + * [WICKET-5335](https://issues.apache.org/jira/browse/WICKET-5335) - After selecting a file MultiFileUploadField does not render properly input field + * [WICKET-5339](https://issues.apache.org/jira/browse/WICKET-5339) - Broadcast.EXACT does not notify Behaviors of target Component + * [WICKET-5343](https://issues.apache.org/jira/browse/WICKET-5343) - AutoCompleteTextField suggestions popup position is wrong when its container has scrollbar + * [WICKET-5345](https://issues.apache.org/jira/browse/WICKET-5345) - Url.canonical() breaks when there are two consecutive "parent" segments followed by a normal segment + * [WICKET-5348](https://issues.apache.org/jira/browse/WICKET-5348) - JavaDoc for IColumn#getSortProperty() in misleading + +#### Improvement + + * [WICKET-5327](https://issues.apache.org/jira/browse/WICKET-5327) - CryptoMapper: insecure default encryption provider + * [WICKET-5331](https://issues.apache.org/jira/browse/WICKET-5331) - Make html5 form validation configurable + * [WICKET-5333](https://issues.apache.org/jira/browse/WICKET-5333) - wicket-bean-validation french translation + * [WICKET-5341](https://issues.apache.org/jira/browse/WICKET-5341) - JavaDoc for IFormValidator + * [WICKET-5354](https://issues.apache.org/jira/browse/WICKET-5354) - Make ResourceBundles and related classes easier for extension http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-11-01-wicket-6.12.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-11-01-wicket-6.12.0-released.md b/_posts/2013/2013-11-01-wicket-6.12.0-released.md new file mode 100644 index 0000000..04f5dfd --- /dev/null +++ b/_posts/2013/2013-11-01-wicket-6.12.0-released.md @@ -0,0 +1,144 @@ +--- +layout: post +title: Apache Wicket 6.12.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.12.0! + +This release marks the twelfth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development +of Wicket, and as such no API breaks are present in this release +compared to 6.0.0. + +### New and noteworthy + +This release fixes 16 bugs and adds the following improvements: + + * Support MultiFileUploadField in FormTester + * Add support for parsing IE 11 user agent + * Log the exception if the application cannot start properly + * Add Wicket.Event.unsubscribe method + * Allow form components to trim the input themselves + * Allow DebugBar contributors to be removed + * Session management doesn't work with Jetty's JDBCSessionManager + * HeaderItem to be Serializable + +### JQuery update in 6.9.0 + +As of Wicket 6.9 we ship JQuery 1.10.1. The JQuery project has +decided to remove deprecated APIs from their codebase from JQuery 1.9 +and up. This means that JQuery plugins using these deprecated APIs no +longer work. See the JQuery migration guide for more information, +available from http://jquery.com/upgrade-guide/1.9/ + +If your application depends on these deprecated APIs you can easily +downgrade to JQuery 1.8.3-the previously provided JQuery that still +contains these APIs. Download the 1.8.3 release of jquery and add it +to your project in its application's init method: + +{% highlight java %} + @Override + protected void init() { + getJavaScriptLibrarySettings() + .setJQueryReference(yourJquery183ResourceReference); + } +{% endhighlight %} + +### CDI injection issue + +In the CDI releases of Weld 2.0.1 and prior, it was assumed that +injection in anonymous inner classes was not legal and when +attempted, it resulted in an exception: + +{% highlight text %} +Caused by: org.jboss.weld.exceptions.DefinitionException: +WELD-000070 Simple bean [EnhancedAnnotatedTypeImpl] private class +com.example.HomePage$AForm cannot be a non-static inner class +{% endhighlight %} + +This was reported as +[WICKET-5226](https://issues.apache.org/jira/browse/WICKET-5226), as +it became an issue in Glassfish 4, which ships with Weld 2.0.1 (or +earlier). We implemented a fix for this particular issue by not +injecting into anonymous inner classes. + +Unfortunately this was not a bug that needed fixing on our part, but +rather in the Weld framework (see +[WELD-1441](https://issues.jboss.org/browse/WELD-1441)) + +Therefore we reverted the commits done for WICKET-5226 and hope that +Glassfish will upgrade their Weld implementation soon. For the whole +story read +[WICKET-5264](https://issues.apache.org/jira/browse/WICKET-5264) + +Glassfish has fixed this in trunk according to +[GLASSFISH-20619](https://java.net/jira/browse/GLASSFISH-20619) but +the fix has yet to be integrated into a release. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.12.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + +* Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.12.0](http://www.apache.org/dyn/closer.cgi/wicket/6.12.0) +* Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.12.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.12.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + +* [Migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.12.0 + +#### Bug + + +* [WICKET-4862](https://issues.apache.org/jira/browse/WICKET-4862) - AjaxPagingNavigationLink and AjaxPagingNavigationIncrementLink output inline onclick attributes in addition to Wicket.Ajax.ajax event registration +* [WICKET-5101](https://issues.apache.org/jira/browse/WICKET-5101) - Could not open second modal window after closing first +* [WICKET-5356](https://issues.apache.org/jira/browse/WICKET-5356) - AutoCompleteSettings.setShowListOnEmptyInput(true) is not working anymore +* [WICKET-5359](https://issues.apache.org/jira/browse/WICKET-5359) - org.apache.wicket.util.string.StringValue#equals broken +* [WICKET-5366](https://issues.apache.org/jira/browse/WICKET-5366) - ResourceAggregator looses information about priority/filtering/... when using a bundle +* [WICKET-5369](https://issues.apache.org/jira/browse/WICKET-5369) - Can't set a cookie using CookieUtils during an ajax request due to java.lang.ClassCastException: org.apache.wicket.ajax.AbstractAjaxResponse$AjaxResponse cannot be cast to org.apache.wicket.request.http.WebResponse +* [WICKET-5374](https://issues.apache.org/jira/browse/WICKET-5374) - SourcesPage fails on resources with non-ASCII characters +* [WICKET-5375](https://issues.apache.org/jira/browse/WICKET-5375) - Improve ConcatBundleResource error handling when a resource is missing +* [WICKET-5378](https://issues.apache.org/jira/browse/WICKET-5378) - AutoCompleteTextField inside a ModalWindow shows auto complete dropdown in the wrong location +* [WICKET-5379](https://issues.apache.org/jira/browse/WICKET-5379) - IE7: AutoCompleteTextField inside a ModalWindow shows auto complete dropdown behind ModalWindow +* [WICKET-5380](https://issues.apache.org/jira/browse/WICKET-5380) - Wicket rebinds the SessionEntry session attribute and this causes problems in Glassfish +* [WICKET-5382](https://issues.apache.org/jira/browse/WICKET-5382) - AutoComplete JavaScript errors +* [WICKET-5385](https://issues.apache.org/jira/browse/WICKET-5385) - wicket-bean-validation PropertyValidator_fr.properties.xml : org.xml.sax.SAXParseException +* [WICKET-5386](https://issues.apache.org/jira/browse/WICKET-5386) - ChainingModel should not check if the modelObject given as argument is null +* [WICKET-5397](https://issues.apache.org/jira/browse/WICKET-5397) - target.prependJavaScript and JQuery-Animation in IE8 +* [WICKET-5398](https://issues.apache.org/jira/browse/WICKET-5398) - XmlPullParser fails to properly parse from String with encoding declaration + +#### Improvement + +* [WICKET-5346](https://issues.apache.org/jira/browse/WICKET-5346) - Support MultiFileUploadField in FormTester +* [WICKET-5362](https://issues.apache.org/jira/browse/WICKET-5362) - Add support for parsing IE 11 user agent +* [WICKET-5376](https://issues.apache.org/jira/browse/WICKET-5376) - Log the exception if the application cannot start properly +* [WICKET-5381](https://issues.apache.org/jira/browse/WICKET-5381) - Add Wicket.Event.unsubscribe method +* [WICKET-5384](https://issues.apache.org/jira/browse/WICKET-5384) - Allow form components to trim the input themselves +* [WICKET-5388](https://issues.apache.org/jira/browse/WICKET-5388) - Allow DebugBar contributors to be removed +* [WICKET-5390](https://issues.apache.org/jira/browse/WICKET-5390) - Session management doesn't work with Jetty's JDBCSessionManager +* [WICKET-5395](https://issues.apache.org/jira/browse/WICKET-5395) - HeaderItem to be Serializable + +#### Wish + +* [WICKET-5393](https://issues.apache.org/jira/browse/WICKET-5393) - Remove 'final' from InlineFrame#onComponentTag() http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2014/2014-01-05-wicket-6.13.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2014/2014-01-05-wicket-6.13.0-released.md b/_posts/2014/2014-01-05-wicket-6.13.0-released.md new file mode 100644 index 0000000..13e68e3 --- /dev/null +++ b/_posts/2014/2014-01-05-wicket-6.13.0-released.md @@ -0,0 +1,232 @@ +--- +layout: post +title: Apache Wicket 6.13.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.13.0! + +This release marks the thirteenth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +### New and noteworthy + +This release fixes 25 bugs and adds the following improvements: + + * Online Wicket User guide (see below) + * CDI 1.1 support (see below) + * JQuery upgraded from 1.10.1 to 1.10.2 + * Implemented BigIntegerConverter + * Migrate Wicket-Atmosphere to Atmosphere 2 + +### Online Wicket reference guide + +After many years of people asking for a reference guide for Apache +Wicket we finally were able to add one to our site thanks to Andrea del +Bene and comSysto for writing the guide and providing the hours of +converting it to our site. + +You can read the manual in 3 forms: multi page HTML, single page HTML +and PDF. + +The contents: + + - Introduction + - How to use the example code + - Why should I learn Wicket? + - Wicket says "Hello, World!" + - Wicket as page layout manager + - Keeping control over HTML + - Component Lifecycle + - Page versioning and caching + - Under the hood of request processing + - Wicket Links and URL generation + - Wicket models and forms + - Wicket forms in detail + - Displaying multiple items with repeaters + - Internationalization with Wicket + - Resource management with Wicket + - An example of integration with JavaScript + - Wicket advanced topics + - Working with AJAX + - Integration with enterprise containers + - Security with Wicket + - Test Driven Development with Wicket + - Test Driven Development with Wicket and Spring + - Wicket Best Practices + - Working with Maven (Appendix) + - Project WicketStuff (Appendix) + - Lost in redirection with Apache Wicket (Appendix) + - Contributing to this guide (Appendix) + +Read more in the ["User guide"](http://wicket.apache.org/start/userguide.html). + + +### New CDI-1.1 integration project + +A new (experimental) module for CDI integration was added to support +CDI 1.1 with Wicket. As CDI 1.0 and 1.1 are different beasts and not +compatible, we had to craft a new module with specific support for the +new CDI standard. The module is still experimental, but we expect to +make it a default module in a couple of releases. + +You can use the new Wicket CDI module by including the following +dependency in your POM: + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-cdi-1.1</artifactId> + <version>0.2</version> +</dependency> +{% endhighlight %} + +Note that you have to remove the old wicket-cdi module and the Seam +conversation dependency: `org.jboss.seam.conversation:seam-conversation-weld` + +For more information about what is new in CDI 1.1 read [this blog post +by Pete Muir](http://s.apache.org/newincdi11). + +### JQuery update in 6.9.0 + +As of Wicket 6.9 we ship JQuery 1.10.1 (since 6.13.0 we ship 1.10.2). +The JQuery project has decided to remove deprecated APIs from their +codebase from JQuery 1.9 and up. This means that JQuery plugins using +these deprecated APIs no longer work. See the JQuery migration guide +for more information, available from [the JQuery web +site](http://jquery.com/upgrade-guide/1.9/) + +If your application depends on these deprecated APIs you can easily +downgrade to JQuery 1.8.3-the previously provided JQuery that still +contains these APIs. Download the 1.8.3 release of jquery and add it +to your project in its application's init method: + +{% highlight java %} + @Override + protected void init() { + getJavaScriptLibrarySettings() + .setJQueryReference(yourJquery183ResourceReference); + } +{% endhighlight %} + +### CDI injection issue + +In the CDI releases of Weld 2.0.1 and prior, it was assumed that +injection in anonymous inner classes was not legal and when +attempted, it resulted in an exception: + +{% highlight text %} +Caused by: org.jboss.weld.exceptions.DefinitionException: +WELD-000070 Simple bean [EnhancedAnnotatedTypeImpl] private class +com.example.HomePage$AForm cannot be a non-static inner class +{% endhighlight %} + +This was reported as +[WICKET-5226](https://issues.apache.org/jira/browse/WICKET-5226), as +it became an issue in Glassfish 4, which ships with Weld 2.0.1 (or +earlier). We implemented a fix for this particular issue by not +injecting into anonymous inner classes. + +Unfortunately this was not a bug that needed fixing on our part, but +rather in the Weld framework (see +[WELD-1441](https://issues.jboss.org/browse/WELD-1441)) + +Therefore we reverted the commits done for WICKET-5226 and hope that +Glassfish will upgrade their Weld implementation soon. For the whole +story read +[WICKET-5264](https://issues.apache.org/jira/browse/WICKET-5264) + +Glassfish has fixed this in trunk according to +[GLASSFISH-20619](https://java.net/jira/browse/GLASSFISH-20619) but +the fix has yet to be integrated into a release. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.13.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + +* Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.13.0](http://www.apache.org/dyn/closer.cgi/wicket/6.13.0) +* Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.13.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.13.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + +* [Migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.13.0 + +#### Bug + + * [WICKET-4294](https://issues.apache.org/jira/browse/WICKET-4294) - AutoCompleteTextField does not show suggestions when it is used on ModalWindow in InternetExplorer + * [WICKET-4997](https://issues.apache.org/jira/browse/WICKET-4997) - Mounted bookmarkable Page not recreated on Session Expiry + * [WICKET-5084](https://issues.apache.org/jira/browse/WICKET-5084) - ClassNotFoundException with Atmosphere on Bookmarkable pages + * [WICKET-5224](https://issues.apache.org/jira/browse/WICKET-5224) - ModalWindow is not visible in Safari when opened from a link at the bottom of a large page + * [WICKET-5321](https://issues.apache.org/jira/browse/WICKET-5321) - Incorporate Wicket Guide into website + * [WICKET-5379](https://issues.apache.org/jira/browse/WICKET-5379) - IE7: AutoCompleteTextField inside a ModalWindow shows auto complete dropdown behind ModalWindow + * [WICKET-5387](https://issues.apache.org/jira/browse/WICKET-5387) - Page#onInitialize called after an exception in the constructor of Page + * [WICKET-5400](https://issues.apache.org/jira/browse/WICKET-5400) - Behaviors#internalAdd(Behavior) erroneously gets id for stateless behaviors + * [WICKET-5402](https://issues.apache.org/jira/browse/WICKET-5402) - NullPointerException when logging out with wicket-atmosphere + * [WICKET-5404](https://issues.apache.org/jira/browse/WICKET-5404) - JQuery 1.10.1 does not work well with IE11, upgrade to 1.10.2 + * [WICKET-5409](https://issues.apache.org/jira/browse/WICKET-5409) - wicket-native-websocket does not work with Safari/Safari iOS + * [WICKET-5413](https://issues.apache.org/jira/browse/WICKET-5413) - Positioning AutoCompleteTextField not correct on resized window + * [WICKET-5416](https://issues.apache.org/jira/browse/WICKET-5416) - BOM in UTF markup file breaks encoding detection + * [WICKET-5418](https://issues.apache.org/jira/browse/WICKET-5418) - PropertyValidator ignoring groups with the @NotNull annotation only + * [WICKET-5422](https://issues.apache.org/jira/browse/WICKET-5422) - ComponentRenderer.renderComponent() adds a page to DataStore + * [WICKET-5424](https://issues.apache.org/jira/browse/WICKET-5424) - Page.isPageStateless() returning true in regular run but false in WicketTester + * [WICKET-5425](https://issues.apache.org/jira/browse/WICKET-5425) - WicketTester doesn't preserve the request cookies when #executeListener() is used + * [WICKET-5426](https://issues.apache.org/jira/browse/WICKET-5426) - Page not recognized as stateless although stateful component is hidden in #onConfigure() + * [WICKET-5429](https://issues.apache.org/jira/browse/WICKET-5429) - ResourceReference's properties are not preserved when using reference replacement + * [WICKET-5437](https://issues.apache.org/jira/browse/WICKET-5437) - When a ConversionException is thrown, its message is not used in the ValidationError + * [WICKET-5441](https://issues.apache.org/jira/browse/WICKET-5441) - IResourceCachingStrategy implementations should only set caching if version matches + * [WICKET-5442](https://issues.apache.org/jira/browse/WICKET-5442) - TimeOfDay.valueOf(Calendar, Time) and TimeOfDay.valueOf(Time) incorrectly use 12-hour clock + * [WICKET-5444](https://issues.apache.org/jira/browse/WICKET-5444) - Make org.apache.wicket.pageStore.memory.PageTable public so custom impls of IDataStoreEvictionStrategy can be made + * [WICKET-5447](https://issues.apache.org/jira/browse/WICKET-5447) - TableTree's NodeBorder does not properly close divs + * [WICKET-5450](https://issues.apache.org/jira/browse/WICKET-5450) - Double escaping when using EnumChoiceRenderer and DropDownChoice + +#### Improvement + + * [WICKET-4268](https://issues.apache.org/jira/browse/WICKET-4268) - Quality of ThumbnailImageResource + * [WICKET-4762](https://issues.apache.org/jira/browse/WICKET-4762) - IResourceVersion should be based on final result + * [WICKET-4905](https://issues.apache.org/jira/browse/WICKET-4905) - PagingNavigation: possible to call setStartIndex() earlier than onBeforeRender? + * [WICKET-4909](https://issues.apache.org/jira/browse/WICKET-4909) - ModalWindow overwrites window.onbeforeunload + * [WICKET-5364](https://issues.apache.org/jira/browse/WICKET-5364) - Reduce logging for wicket-atmosphere + * [WICKET-5367](https://issues.apache.org/jira/browse/WICKET-5367) - migrate Wicket-Atmosphere to Atmosphere 2 + * [WICKET-5401](https://issues.apache.org/jira/browse/WICKET-5401) - provide no-argument constructor in string based header items + * [WICKET-5411](https://issues.apache.org/jira/browse/WICKET-5411) - Improve AutoLabels by updating their CSS classes automatically during Ajax requests + * [WICKET-5415](https://issues.apache.org/jira/browse/WICKET-5415) - Do not initialize pages which were not rendered + * [WICKET-5420](https://issues.apache.org/jira/browse/WICKET-5420) - Make UploadProgressBar easier to extend + * [WICKET-5423](https://issues.apache.org/jira/browse/WICKET-5423) - Create IResource based implementation of Native Web Sockets + * [WICKET-5435](https://issues.apache.org/jira/browse/WICKET-5435) - Ajaxified version of WebSession#getClientInfo should be added + * [WICKET-5436](https://issues.apache.org/jira/browse/WICKET-5436) - Implement BigIntegerConverter + * [WICKET-5443](https://issues.apache.org/jira/browse/WICKET-5443) - Increase randomness and reduce predictability of CaptchaImageResource rendered images + * [WICKET-5445](https://issues.apache.org/jira/browse/WICKET-5445) - Make CaptchaImageResource easier to extend and reuse + * [WICKET-5455](https://issues.apache.org/jira/browse/WICKET-5455) - Allow access to the JS ResourceReference of AbstractAutoCompleteBehavior + * [WICKET-5456](https://issues.apache.org/jira/browse/WICKET-5456) - Make RawMarkup extendable + +#### Task + + * [WICKET-5431](https://issues.apache.org/jira/browse/WICKET-5431) - Download pages must use ASF mirror system for current releases + +#### Wish + + * [WICKET-1197](https://issues.apache.org/jira/browse/WICKET-1197) - add/remove all buttons in Palette component + * [WICKET-4951](https://issues.apache.org/jira/browse/WICKET-4951) - Wicket-cdi and OpenWebBeans 1.1.x incompatibility http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2014/2014-02-06-cve-2013-2055.md ---------------------------------------------------------------------- diff --git a/_posts/2014/2014-02-06-cve-2013-2055.md b/_posts/2014/2014-02-06-cve-2013-2055.md new file mode 100644 index 0000000..602e50e --- /dev/null +++ b/_posts/2014/2014-02-06-cve-2013-2055.md @@ -0,0 +1,36 @@ +--- +layout: post +title: CVE-2013-2055 - Apache Wicket Information disclosure vulnerability +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.4.22, 1.5.10 and 6.7.0 + +Description: +It is possible to make Wicket deliver the HTML templates in their raw/non-processed form. +An attacker could see any sensitive information in the part of the HTML template that is usually ignored during rendering. +For example if there is sensitive information before or after the Wicket Panel/Border's markup: + +{% highlight xml %} +something sensitive here 1 +<wicket:panel> + real application code +</wicket:panel> +something sensitive here 2 +{% endhighlight %} + +Usually Wicket will render only the "real application code" part but by exploiting this vulnerability an attacker can see also the code with the sensitive information. + +The application developers are recommended to upgrade to: +- [Apache Wicket 1.4.23](/2014/02/06/wicket-1.4.23-released.html) +- [Apache Wicket 1.5.11](/2014/02/06/wicket-1.5.11-released.html) +- [Apache Wicket 6.8.0](/2013/05/17/wicket-6.8.0-released.html) + +and/or to remove any sensitive information in the HTML templates. + +Apache Wicket Team \ No newline at end of file http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2014/2014-02-06-wicket-1.4.23-released.md ---------------------------------------------------------------------- diff --git a/_posts/2014/2014-02-06-wicket-1.4.23-released.md b/_posts/2014/2014-02-06-wicket-1.4.23-released.md new file mode 100644 index 0000000..d8a433b --- /dev/null +++ b/_posts/2014/2014-02-06-wicket-1.4.23-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.4.23 released +--- + +This is twenty thirdth release of the Wicket 1.4.x series. This is a security bugfix release on the 1.4.x branch. +Read [CVE-2013-2055](/2014/02/06/cve-2013-2055.html) for more information. + +* [Git tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/wicket-1.4.23) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket</artifactId> + <version>1.4.23</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.4.23) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2014/2014-02-06-wicket-1.5.11-released.md ---------------------------------------------------------------------- diff --git a/_posts/2014/2014-02-06-wicket-1.5.11-released.md b/_posts/2014/2014-02-06-wicket-1.5.11-released.md new file mode 100644 index 0000000..eebfa64 --- /dev/null +++ b/_posts/2014/2014-02-06-wicket-1.5.11-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.11 released +--- + +This is the eleventh maintenance release of the Wicket 1.5.x series. This release brings over 34 bug fixes and improvements. + +* [Git tag](https://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/wicket-1.5.11) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12324069) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.11</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.11) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2014/2014-02-20-wicket-6.14.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2014/2014-02-20-wicket-6.14.0-released.md b/_posts/2014/2014-02-20-wicket-6.14.0-released.md new file mode 100644 index 0000000..c1484a6 --- /dev/null +++ b/_posts/2014/2014-02-20-wicket-6.14.0-released.md @@ -0,0 +1,101 @@ +--- +layout: post +title: Apache Wicket 6.14.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.14.0! + +This release marks the fourteenth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +### New and noteworthy + +This release fixes 34 bugs and adds the following improvements: + + * JQuery upgraded from 1.10.2 to 1.11.0 + * Fix for [CVE-2014-0043](/2014/02/21/cve-2014-0043.html) + * Wicket Session may not be saved in the SessionStore (Http Session) under some conditions and lead to lost state + * Update classes copied from commons-fileupload to fix CVE-2014-0050 + * Allow <script> tags to have children components to be able to use client side templating + + + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.14.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + +* Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.14.0](http://www.apache.org/dyn/closer.cgi/wicket/6.14.0) +* Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.14.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.14.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in replacement. If +you come from a version prior to 6.0.0, please read our Wicket 6 +migration guide found at + +* [Migration to Wicket 6.0](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.14.0 + + +#### Bug + * [WICKET-4697] - Autolinking not working as soon as component gets a wicket:id + * [WICKET-5043] - Page not mounted with WebApplication#mountPackage + * [WICKET-5449] - Missing chapter 2 is causing off-by-one page names in the guides URL links + * [WICKET-5460] - onBeforeRender called too early on stateless page + * [WICKET-5462] - Ajax form-component-label repainting fails when setResponsePage() is used to navigate away from the page that has previously failed form validaiton + * [WICKET-5464] - AbstractAjaxTimerBehavior does not work in combination with Wizards + * [WICKET-5466] - ListenerInterfaceRequestHandler#respond throws ComponentNotFoundException as a side-effect + * [WICKET-5467] - NumberTextField should support "any" as valid step attribute value + * [WICKET-5468] - UrlRenderer#renderRelativeUrl potentially appends "/" after query parameters + * [WICKET-5469] - ModalWindow unload warning always displayed (even if window is closed) + * [WICKET-5472] - PackageResource#internalGetResourceStream() should return ProcessingResourceStream only when the resource is existing + * [WICKET-5473] - Wicket does not handle non in-memory Httpsessions correctly + * [WICKET-5477] - CSS class is not applied to <TD> for data filter + * [WICKET-5478] - Wrong JavaDoc for WicketTester + * [WICKET-5480] - AutoLabelResolver creates null pointer exception in 6.13 + * [WICKET-5482] - Wicket-guice doesn't support @javax.inject.Named annotations + * [WICKET-5484] - WebPageRenderer must not render full page in Ajax requests + * [WICKET-5486] - WebPageRenderer should honor RedirectPolicy.ALWAYS_REDIRECT more consistently + * [WICKET-5491] - Wicket.DateTime.getViewportHeight() returning undefined on IE8, positions calendar out of viewport + * [WICKET-5492] - WebApplication ignores a SecurityException when reading the configuration type + * [WICKET-5496] - Wrong translation of RangeValidator.minimum and RangeValidator.maximum + * [WICKET-5497] - NPE in JsonUtils when the value is null + * [WICKET-5499] - Page is not touched during initialization + * [WICKET-5500] - Ignore the path parameters when reading the page class + * [WICKET-5502] - Patch FileUploadBase to fix CVE-2014-0050 + + +#### Improvement + * [WICKET-5288] - Allow <script>-Tags act as WebMarkUpContainer to add Child-Components + * [WICKET-5439] - Allow restarting AbstractAjaxTimerBehavior without updating its hosting component + * [WICKET-5463] - RequestUtil.getCharset(HttpServletRequest request) Resilience against unsupported Charsets in Request + * [WICKET-5470] - Remove 'final' from org.apache.wicket.markup.html.form.EnumChoiceRenderer#getDisplayValue + * [WICKET-5471] - Store the page if it is known that it will be used in a following request + * [WICKET-5493] - Disable jar indexing + +#### New Feature + * [WICKET-3491] - Introduce IComponentOnConfigureListener + + +#### Task + * [WICKET-5488] - Promote experimental modules to become stable + * [WICKET-5494] - Upgrade JQuery to latest stable - 1.11.0 and 2.1.0 \ No newline at end of file http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2014/2014-02-21-cve-2014-0043.md ---------------------------------------------------------------------- diff --git a/_posts/2014/2014-02-21-cve-2014-0043.md b/_posts/2014/2014-02-21-cve-2014-0043.md new file mode 100644 index 0000000..41ea5a4 --- /dev/null +++ b/_posts/2014/2014-02-21-cve-2014-0043.md @@ -0,0 +1,25 @@ +--- +layout: post +title: CVE-2014-0043 - Apache Wicket Information disclosure vulnerability +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.5.10 and 6.13.0 + +Description: + +By issuing requests to special urls handled by Wicket it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use. + +The application developers are recommended to upgrade to: +- [Apache Wicket 1.5.11](/2014/02/06/wicket-1.5.11-released.html) +- [Apache Wicket 6.14.0](/2014/02/20/wicket-6.14.0-released.html) + +Credit: +This issue was reported by Christian Schneider! + +Apache Wicket Team \ No newline at end of file
