http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-05-11-wicket-1.5-RC4.2-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-05-11-wicket-1.5-RC4.2-released.md b/_posts/2011/2011-05-11-wicket-1.5-RC4.2-released.md new file mode 100644 index 0000000..8bd6034 --- /dev/null +++ b/_posts/2011/2011-05-11-wicket-1.5-RC4.2-released.md @@ -0,0 +1,21 @@ +--- +layout: post +title: Wicket 1.5-RC4.2 released +--- + +The Wicket Team is proud to introduce the fourth Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC3 and 1.5-RC4.2 + +More detailed migration notes are available on our [Migrate to 1.5 Wiki Page](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+1.5) + +Release Artifacts: +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.5-RC4.2) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12316330) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5-RC4.2</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5-RC4.2) (including source)
http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-05-17-wicket-cookbook-contest.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-05-17-wicket-cookbook-contest.md b/_posts/2011/2011-05-17-wicket-cookbook-contest.md new file mode 100644 index 0000000..44d7062 --- /dev/null +++ b/_posts/2011/2011-05-17-wicket-cookbook-contest.md @@ -0,0 +1,13 @@ +--- +layout: post +title: Apache Wicket Cookbook Giveaway Contest +--- + +<img style="float: left; margin-left: 10px; margin-right: 10px;" title="Apache Wicket Cookbook" src="http://wicket.apache.org/learn/books/awc.png"; alt="" width="90" height="111" /> +Packt Publishing has generously allowed me to +give away a free copy of the ebook version of <a href="http://link.packtpub.com/AzN8N9";><strong>Apache Wicket Cookbook</strong></a> (http://link.packtpub.com/AzN8N9), and a <strong>free one year subscription</strong> to PacktLib. For details see the <a href="http://wicketinaction.com/2011/05/apache_wicket_cookbook_giveaway_contest";>contest announcement</a>. + +Cheers,<br/> +-Igor +<br/><br/><br/><br/><br/><br/> + http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-06-25-wicket-1.5-RC5.1-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-06-25-wicket-1.5-RC5.1-released.md b/_posts/2011/2011-06-25-wicket-1.5-RC5.1-released.md new file mode 100644 index 0000000..34ae9cf --- /dev/null +++ b/_posts/2011/2011-06-25-wicket-1.5-RC5.1-released.md @@ -0,0 +1,21 @@ +--- +layout: post +title: Wicket 1.5-RC5.1 released +--- + +The Wicket Team is proud to introduce the fourth Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC4.2 and 1.5-RC5.1 + +More detailed migration notes are available on our [Migrate to 1.5 Wiki Page](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+1.5) + +Release Artifacts: +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.5-RC5.1) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12316423) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5-RC5.1</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5-RC5.1) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-08-09-wicket-1.4.18-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-08-09-wicket-1.4.18-released.md b/_posts/2011/2011-08-09-wicket-1.4.18-released.md new file mode 100644 index 0000000..f1b338b --- /dev/null +++ b/_posts/2011/2011-08-09-wicket-1.4.18-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.4.18 released +--- + +This is eightteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch. + +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.4.18) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12316329) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket</artifactId> + <version>1.4.18</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.4.18) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-08-23-cve-2011-2712.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-08-23-cve-2011-2712.md b/_posts/2011/2011-08-23-cve-2011-2712.md new file mode 100644 index 0000000..f231bfd --- /dev/null +++ b/_posts/2011/2011-08-23-cve-2011-2712.md @@ -0,0 +1,35 @@ +--- +layout: post +title: CVE-2011-2712 - Apache Wicket XSS vulnerability +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.4.x + +Apache Wicket 1.3.x and 1.5-RCx are not affected + +Description: +With multi window support application configuration and special query parameters it is possible to execute any kind of JavaScript on a site running with the affected versions. + +Mitigation: +Either disable multi window support with + +{% highlight java %} +public class MyApp extends WebApplication { + public void init() { + super.init(); + getPageSettings.setAutomaticMultiWindowSupport(false); + } +} +{% endhighlight %} + +or upgrade to [Apache Wicket 1.4.18](http://wicket.apache.org/2011/08/09/wicket-1.4.18-released.html) or +[Apache Wicket 1.5-RC5.1](http://wicket.apache.org/2011/06/25/wicket-1.5-RC5.1-released.html) + +Credit: +This issue was discovered by Sven Krewitt of TÃV Rheinland i-sec GmbH. http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-08-28-1.5-RC7-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-08-28-1.5-RC7-released.md b/_posts/2011/2011-08-28-1.5-RC7-released.md new file mode 100644 index 0000000..40fca7b --- /dev/null +++ b/_posts/2011/2011-08-28-1.5-RC7-released.md @@ -0,0 +1,22 @@ +--- +layout: post +title: Wicket 1.5-RC7 released +--- + +The Wicket Team is proud to introduce the seventh Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC5.1 and 1.5-RC7 + +More detailed migration notes are available on our [Migrate to 1.5 Wiki Page](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+1.5) + +Release Artifacts: +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.5-RC7) +* [Changelog RC6](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12316657) +* [Changelog RC7](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12317645) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5-RC7</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5-RC7) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-09-07-wicket-1.5-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-09-07-wicket-1.5-released.md b/_posts/2011/2011-09-07-wicket-1.5-released.md new file mode 100644 index 0000000..f40b4dc --- /dev/null +++ b/_posts/2011/2011-09-07-wicket-1.5-released.md @@ -0,0 +1,124 @@ +--- +layout: post +title: Apache Wicket releases Wicket 1.5 +--- +The Apache Wicket team is proud to announce the immediate availability of the newest release of their component oriented open source Java web framework. Apache Wicket 1.5 has been in development for the last two years and brings many improvements over previous versions. + +Downloading Apache Wicket 1.5 +----------------------------- + +You can download the release here: [http://www.apache.org/dyn/closer.cgi/wicket/1.5.0][1] + +Or use this in your Maven POM to upgrade to the new version: + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.0</version> +</dependency> +{% endhighlight %} + +Please note that Wicket's main artifact ID has been renamed to `wicket-core`. + +You will need to upgrade all modules (i.e. wicket, wicket-extensions, wicket-ioc, wicket-spring, etc) to 1.5.0. **It is not possible to mix previous versions of Wicket with modules of this release.** + +Most notable changes +-------------------- + +With this release the Wicket team has revised many of its internals. A short list: + + - HTML5 components added: `EmailTextField`, `NumberTextField`, `UrlTextField` and `RangeTextField` + - New inter-component events (explained below) + - Minimum required servlet API is servlet-api 2.5 + - All standard validators now extend `Behavior` to allow for client side validations + - `IBehavior` has been removed and `AbstractBehavior` has been deprecated, you should now extend `Behavior` instead + - Simplified the [request cycle processing][3] and made it more extensible + - URL handling is now in one place + - Wicket's rendering code has been greatly simplified + - Improved browser [caching support][4] + - ClientSideImageMap replaces old ImageMap + - Better support for running behind proxies with `x-forwarded-for` header + - [Request cycle listeners][3] make it easier to integrate frameworks in your Wicket application + - Consistent naming: methods with `Javascript` in the name have been renamed to use proper capitalization: `JavaScript` + - Switching to HTTPS is as simple as configuring a new root mapper to make Wicket HTTPS aware and annotating a page with @RequireHttps + +A longer list of changes and improvements can be found in our [migration guide][2]. + +### Inter-component events ### + +Wicket 1.5 offers a simple, yet flexible, way for component to communicate with each other in a decoupled manner. The two major interfaces that facilitate this are: + +{% highlight java %} +/** + * Objects that can send events + */ +public interface IEventSource { + <T> void send(IEventSink sink, Broadcast broadcast, T payload); +} +{% endhighlight %} + +and + +{% highlight java %} +/** + * Objects that can receive events + */ +public interface IEventSink +{ + /** + * Called when an event is sent to this sink + */ + void onEvent(IEvent<?> event); +} +{% endhighlight %} + +The classes that implement these interfaces, and can thus participate in the event mechanism are: `Component`, `RequestCycle`, `Session`, and `Application`. + +The mechanism allows for different event broadcast methods defined here: + +{% highlight java %} +/** + * Defines the event broadcast type. + */ +public enum Broadcast { + BREADTH, + DEPTH, + BUBBLE, + EXACT; +} +{% endhighlight %} + +There is an example in wicket-examples which demonstrates the usage of this. + +Applications can register custom event dispatchers in `FrameworkSettings`; the dispatchers can be used to build custom event delivery mechanisms. For example a custom `IEventDispatcher` mechanism can route events to annotated methods, for example: + +{% highlight java %} +public class MyComponent extends Component { + @OnEvent + private void onUserAdded(UserAddedEvent event) {...} +} +{% endhighlight %} + +where `UserAddedEvent` is the event payload object. + +The default `Component#onEvent` method will be called even if custom dispatchers are registered. + +A default event is raised whenever Wicket begins to create an AJAX response. The payload of the event is the `AjaxRequestTarget` used for event. Sample implementation: + +{% highlight java %} +// component that always adds itself to the ajax response +public class MyComponent extends Component { + public void onEvent(IEvent event) { + if (event.getPayload() instanceof AjaxRequestTarget) { + ((AjaxRequestTarget)event.getPayload()).add(this); + } + } +} +{% endhighlight %} + + +[1]: http://www.apache.org/dyn/closer.cgi/wicket/1.5.0 +[2]: http://s.apache.org/wicket-1.5-migration +[3]: https://cwiki.apache.org/confluence/display/WICKET/RequestCycle+in+Wicket+1.5 +[4]: https://cwiki.apache.org/confluence/display/WICKET/Caching+in+Wicket+1.5 http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-09-29-wicket-1.5.1-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-09-29-wicket-1.5.1-released.md b/_posts/2011/2011-09-29-wicket-1.5.1-released.md new file mode 100644 index 0000000..40d8c5c --- /dev/null +++ b/_posts/2011/2011-09-29-wicket-1.5.1-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.1 released +--- + +This is the first maintenance release of the Wicket 1.5.x series. This release brings over 40 bug fixes and 15 improvements. + +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.5.1) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?&version=12315430&projectId=12310561) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.1</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.1) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-10-17-wicket-1.4.19-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-10-17-wicket-1.4.19-released.md b/_posts/2011/2011-10-17-wicket-1.4.19-released.md new file mode 100644 index 0000000..826c76b --- /dev/null +++ b/_posts/2011/2011-10-17-wicket-1.4.19-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.4.19 released +--- + +This is nineteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch. + +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.4.19) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12317570) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket</artifactId> + <version>1.4.19</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.4.19) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-10-24-wicket-1.5.2-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-10-24-wicket-1.5.2-released.md b/_posts/2011/2011-10-24-wicket-1.5.2-released.md new file mode 100644 index 0000000..18875b9 --- /dev/null +++ b/_posts/2011/2011-10-24-wicket-1.5.2-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.2 released +--- + +This is the second maintenance release of the Wicket 1.5.x series. This release brings over 25 bug fixes and 5 improvements. + +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.5.2) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12318078) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.2</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.2) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2011/2011-11-14-wicket-1.5.3-released.md ---------------------------------------------------------------------- diff --git a/_posts/2011/2011-11-14-wicket-1.5.3-released.md b/_posts/2011/2011-11-14-wicket-1.5.3-released.md new file mode 100644 index 0000000..cea48a5 --- /dev/null +++ b/_posts/2011/2011-11-14-wicket-1.5.3-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.3 released +--- + +This is the third maintenance release of the Wicket 1.5.x series. This release brings over 40 bug fixes and improvements. + +* [Subversion tag](http://svn.apache.org/repos/asf/wicket/releases/wicket-1.5.3) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12318550) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.3</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.3) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-01-23-wicket-1.5.4-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-01-23-wicket-1.5.4-released.md b/_posts/2012/2012-01-23-wicket-1.5.4-released.md new file mode 100644 index 0000000..0025fdb --- /dev/null +++ b/_posts/2012/2012-01-23-wicket-1.5.4-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.4 released +--- + +This is the fourth maintenance release of the Wicket 1.5.x series. This release brings over 68 bug fixes and improvements. + +* [Git tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket-1.5.4) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12319051) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.4</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.4) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-03-12-wicket-1.4.20-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-03-12-wicket-1.4.20-released.md b/_posts/2012/2012-03-12-wicket-1.4.20-released.md new file mode 100644 index 0000000..320d239 --- /dev/null +++ b/_posts/2012/2012-03-12-wicket-1.4.20-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.4.20 released +--- + +This is twentieth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch. + +* [Subversion tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket-1.4.20) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12318545) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket</artifactId> + <version>1.4.20</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.4.20) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-03-12-wicket-1.5.5-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-03-12-wicket-1.5.5-released.md b/_posts/2012/2012-03-12-wicket-1.5.5-released.md new file mode 100644 index 0000000..1e98759 --- /dev/null +++ b/_posts/2012/2012-03-12-wicket-1.5.5-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.5 released +--- + +This is the fifth maintenance release of the Wicket 1.5.x series. This release brings over 50 bug fixes and improvements. + +* [Git tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket-1.5.5) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12319052) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.5</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.5) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-03-22-wicket-cve-2012-0047.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-03-22-wicket-cve-2012-0047.md b/_posts/2012/2012-03-22-wicket-cve-2012-0047.md new file mode 100644 index 0000000..67ab3e7 --- /dev/null +++ b/_posts/2012/2012-03-22-wicket-cve-2012-0047.md @@ -0,0 +1,25 @@ +--- +layout: post +title: CVE-2012-0047 - Apache Wicket XSS vulnerability via pageMapName request parameter +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.4.x + +Apache Wicket 1.3.x and 1.5.x are not affected + +Description: +A Cross Site Scripting (XSS) attack is possible by manipulating the +value of 'wicket:pageMapName' request parameter. + +Mitigation: +Upgrade to [Apache Wicket 1.4.20](http://wicket.apache.org/2012/03/12/wicket-1.4.20-released.html) or +[Apache Wicket 1.5.5](http://wicket.apache.org/2012/03/12/wicket-1.5.5-released.html) + +Credit: +This issue was discovered by Jens Schenck and Stefan Schmidt. http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-03-22-wicket-cve-2012-1089.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-03-22-wicket-cve-2012-1089.md b/_posts/2012/2012-03-22-wicket-cve-2012-1089.md new file mode 100644 index 0000000..cca6634 --- /dev/null +++ b/_posts/2012/2012-03-22-wicket-cve-2012-1089.md @@ -0,0 +1,46 @@ +--- +layout: post +title: CVE-2012-1089 - Apache Wicket serving of hidden files vulnerability +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.4.x and 1.5.x + +Description: +It is possible to view the content of any file of a web application by +using an Url to a Wicket resource which resolves to a 'null' package. +With such a Url the attacker can request the content of any file by specifying +its relative path, i.e. the attacker must know the file name to be able to +request it. + +Mitigation: +Setup a custom org.apache.wicket.markup.html.IPackageResourceGuard that provides +a whitelist of allowed resources. +Since versions 1.4.20 and 1.5.5 Apache Wicket uses by default +org.apache.wicket.markup.html.SecurePackageResourceGuard with a preconfigured +list of allowed file extensions. +Either setup SecurePackageResourceGuard with code like: + +{% highlight java %} +public class MyApp extends WebApplication { + public void init() { + super.init(); + SecurePackageResourceGuard guard = new SecurePackageResourceGuard(); + guard.addPattern(...); + guard.addPattern(...); + getResourceSettings().setPackageResourceGuard(guard); + } +} +{% endhighlight %} + +or upgrade [Apache Wicket 1.4.20](http://wicket.apache.org/2012/03/12/wicket-1.4.20-released.html) or +[Apache Wicket 1.5.5](http://wicket.apache.org/2012/03/12/wicket-1.5.5-released.html) + + +Credit: +This issue was discovered by Sebastian van Erk. http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-03-26-wicket-6.0.0-beta1-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-03-26-wicket-6.0.0-beta1-released.md b/_posts/2012/2012-03-26-wicket-6.0.0-beta1-released.md new file mode 100644 index 0000000..19b0b72 --- /dev/null +++ b/_posts/2012/2012-03-26-wicket-6.0.0-beta1-released.md @@ -0,0 +1,31 @@ +--- +layout: post +title: Wicket 6.0.0-beta1 released +--- + +The Wicket team is proud to announce the first beta release of the Wicket 6.x series. +This release brings over many improvements over the 1.5.x series. + +Check the [roadmap](https://cwiki.apache.org/confluence/display/WICKET/Wicket+6.0+Roadmap) with a list of the major goals. +And the [migration guide](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) with all major and some minor changes between 1.5.x and 6.x series. + +The Jira changelog of all closed ticket at [Jira](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12319052) + +To use it in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.0.0-beta1</version> +</dependency> +{% endhighlight %} + +If you don't use dependencies management build tool then you can download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/6.0.0-beta1) (including source). + +There are no more planned API breaks but if you find something that can be made better now it the time to discuss it! +We will try to avoid making any API changes in the Release Candidates that will follow this beta release. + +Any feedback about the new features, their implementation and their documentation is very welcome! + + +The Wicket team! http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-05-07-wicket-1.5.6-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-05-07-wicket-1.5.6-released.md b/_posts/2012/2012-05-07-wicket-1.5.6-released.md new file mode 100644 index 0000000..e3f5785 --- /dev/null +++ b/_posts/2012/2012-05-07-wicket-1.5.6-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.6 released +--- + +This is the sixth maintenance release of the Wicket 1.5.x series. This release brings over 40 bug fixes and improvements. + +* [Git tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/wicket-1.5.6) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12319053) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.6</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.6) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-05-29-wicket-6.0.0-beta2-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-05-29-wicket-6.0.0-beta2-released.md b/_posts/2012/2012-05-29-wicket-6.0.0-beta2-released.md new file mode 100644 index 0000000..85f5321 --- /dev/null +++ b/_posts/2012/2012-05-29-wicket-6.0.0-beta2-released.md @@ -0,0 +1,72 @@ +--- +layout: post +title: Wicket 6.0.0-beta2 released +--- + +The Wicket team is proud to announce the second beta release of the Wicket 6.x series. +This release brings over many improvements over the 1.5.x series. + +### New and Noteworthy ### + +#### Wicket Atmosphere #### + +The Beta 2 contains a new experimental module Wicket Atmosphere, which brings serverside push to Wicket and provides a great way to render serverside markup and send it to the browsers of your users. Check out the atmosphere example in our Examples project to see it in action. + +In your application's init method you need to register the push event bus: + +{% highlight java %} +new EventBus(this); +{% endhighlight %} + +Somewhere where you want to push your changes to the client, you need to publish your event to the push `EventBus`: + +{% highlight java %} +EventBus.get().post(input.getModelObject()); +{% endhighlight %} + +And finally you need to subscribe your page (or component) to the `EventBus`'s events with `@Subscribe`, taking in the typed parameter you post to the EventBus (in this case a `String`): + +{% highlight java %} +@Subscribe +public void receiveMessage(AjaxRequestTarget target, String message) { + label.setDefaultModelObject(message); + target.add(label); +} +{% endhighlight %} + +To be able to use Wicket Atmosphere you need to include the following dependency: + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-atmosphere</artifactId> + <version>0.1</version> +</dependency> +{% endhighlight %} + +Please note that this is still experimental. + +### This release ### + +Check the [roadmap](https://cwiki.apache.org/confluence/display/WICKET/Wicket+6.0+Roadmap) with a list of the major goals. +And the [migration guide](https://cwiki.apache.org/confluence/display/WICKET/Migration+to+Wicket+6.0) with all major and some minor changes between 1.5.x and 6.x series. + +The Jira changelog of all closed ticket at [Jira](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12320343) + +To use it in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.0.0-beta2</version> +</dependency> +{% endhighlight %} + +If you don't use a dependencies management build tool then you can download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/6.0.0-beta2) (including source). + +There are no more planned API breaks but if you find something that can be made better now it the time to discuss it! +We will try to avoid making any API changes in the Release Candidates that will follow this beta release. + +Any feedback about the new features, their implementation and their documentation is very welcome! + +The Wicket team! http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-06-04-wicket-1.5.7-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-06-04-wicket-1.5.7-released.md b/_posts/2012/2012-06-04-wicket-1.5.7-released.md new file mode 100644 index 0000000..df2d6ac --- /dev/null +++ b/_posts/2012/2012-06-04-wicket-1.5.7-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.7 released +--- + +This is the seventh maintenance release of the Wicket 1.5.x series. This release brings over 26 bug fixes and improvements. + +* [Git tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/wicket-1.5.7) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12321241) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.7</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.7) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-06-20-wicket-native-websockets.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-06-20-wicket-native-websockets.md b/_posts/2012/2012-06-20-wicket-native-websockets.md new file mode 100644 index 0000000..a57e218 --- /dev/null +++ b/_posts/2012/2012-06-20-wicket-native-websockets.md @@ -0,0 +1,15 @@ +--- +layout: post +title: Wicket Native WebSockets support +--- + +A new experimental module just landed in Wicket's Git repository - Wicket Native WebSocket. +It provides the support for HTML5 WebSockets in Wicket as the one for Ajax that you may already use in your applications. + +The full documentation is available at [Native WebSocket Wiki](https://cwiki.apache.org/confluence/x/0vSoAQ) +A demo application is available at [Martin Grigorov's GitHub](https://github.com/martin-g/wicket-native-websocket-example) + +Any feedback about the new module, its implementation and its documentation is very welcome! +Just ask your question in Wicket's mailing lists or IRC channel. + +The Wicket team! http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-07-16-wicket-6.0.0-beta3-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-07-16-wicket-6.0.0-beta3-released.md b/_posts/2012/2012-07-16-wicket-6.0.0-beta3-released.md new file mode 100644 index 0000000..133bae8 --- /dev/null +++ b/_posts/2012/2012-07-16-wicket-6.0.0-beta3-released.md @@ -0,0 +1,132 @@ +--- +layout: post +title: Wicket 6.0.0-beta3 released +--- + +The Wicket team is proud to announce the third beta release of +the Wicket 6.x series. This release is an intermediary release +just before we give you 6.0.0 final. + +There are no more planned API breaks but if you find something +that can be made better now it the time to discuss it! The +next planned release is 6.0.0 final, so speak now or forever +be silenced (or learn to live with it until 7.0.0 comes out). + +Any feedback about the new features, their implementation and +their documentation is very welcome! + +New and Noteworthy in 6.0.0-beta3 +================================= + +**NOTA BENE:** the use of modules that are marked experimental, +by being part of the sub module 'wicket-experimental', are really +that: experimental. These modules can change, disappear or blow up +your computer without notice and you really use/depend on them at +your own risk. + +Wicket Native Websockets +------------------------ + +A new **experimental** module has been added to Wicket 6 - Wicket +Native WebSocket. This module adds support for using HTML5 +WebSockets as you may use Ajax in your Wicket applications. + +All you have to do is to add a WebSocketBehavior to your page and from +there on you can receive messages from the clients and push messages +back to them. + +At [our wiki](https://cwiki.apache.org/confluence/x/0vSoAQ) you may +find the documentation and a link to a demo application. + +If something is not clear feel free to ask your question in the +mailing lists and we will improve the documentation. + +Wicket Bootstrap +---------------- + +The **experimental** modules now contain a new module for integration +with Twitter's Bootstrap. Currently this module only provides a +central way of using the Bootstrap resources. In the future we +will provide proper components and behaviors for the Bootstrap +concepts. + +To use this new **experimental** module, add this to your pom: + + <dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-bootstrap</artifactId> + <version>0.1</version> + </dependency> + +To add Bootstrap support to your pages, add this in the `renderHead` +method: + + @Override + public void renderHead(IHeaderResponse response) { + super.renderHead(response); + + Bootstrap.renderHead(response); + } + +This will render a dependency to the Twitter bootstrap CSS and JS files, +including the required dependency to JQuery. + +New Wicket Examples +------------------- +We have started an effort to revamp the tried and tested Wicket Examples +and bring them into 2012. The new examples are located in the +**experimental** module. + +It is currently a copy of Twitter Bootstrap's design but with Wicket +specific filling. + +You can test the examples by running the + + wicket-examples-jar/src/test/java/Start.java + +class in the default package. + +The examples will feature a component reference with typical use +cases, full examples such as Hello, World, and descriptions of the +code in play. + +Wicket Atmosphere +----------------- + +Wicket Atmosphere in the experimental modules has seen an upgrade of +the Atmosphere dependency to 1.0.0-beta3. This has caused an +incompatibility with Jetty 7.6.3 (used with Wicket and the examples). To +mitigate this, you need to override either: + + - the dependency on Jetty to 8.1.3 or newer, or + - the dependency on Atmosphere to 0.9.5 (0.9.6 and 0.9.7 are broken as + well) + +See [WICKET-4656](https://issues.apache.org/jira/browse/WICKET-4656) for +more information regarding this issue. + +This release +============ + + - Check the roadmap with a list of the major + goals: [6.0 roadmap](https://cwiki.apache.org/confluence/display/WICKET/Wicket+6.0+Roadmap) + - And the migration guide with all major and some minor changes + between 1.5.x and 6.x series: [migration guide](http://s.apache.org/wicket-6.0-migration) + - The Jira changelog of all closed ticket at + Jira: [changelog](http://s.apache.org/wicket-6.0.0-beta3-changelog) + +To use it in Maven: + + <dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.0.0-beta3</version> + </dependency> + +If you donât use a dependencies management build tool then you +can download the full distribution (including source) and build from +source yourself. + +Have fun, + +The Wicket team! http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-08-24-wicket-1.5.8-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-08-24-wicket-1.5.8-released.md b/_posts/2012/2012-08-24-wicket-1.5.8-released.md new file mode 100644 index 0000000..6f18ebc --- /dev/null +++ b/_posts/2012/2012-08-24-wicket-1.5.8-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.8 released +--- + +This is the eighth maintenance release of the Wicket 1.5.x series. This release brings over 45 bug fixes and improvements. + +* [Git tag](https://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket.1.5.8) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12321662) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.8</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.8) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-09-05-wicket-1.4.21-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-09-05-wicket-1.4.21-released.md b/_posts/2012/2012-09-05-wicket-1.4.21-released.md new file mode 100644 index 0000000..7a672d5 --- /dev/null +++ b/_posts/2012/2012-09-05-wicket-1.4.21-released.md @@ -0,0 +1,21 @@ +--- +layout: post +title: Wicket 1.4.21 released +--- + +This is 21st release of the Wicket 1.4.x series. This is also the last release of the 1.4.x series, rounding up the remaining +bugfixes. No further +releases will happen in this branch. + +* [Git tag](http://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket-1.4.21) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12320171) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket</artifactId> + <version>1.4.21</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.4.21) (including source) + http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-09-05-wicket-6.0.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-09-05-wicket-6.0.0-released.md b/_posts/2012/2012-09-05-wicket-6.0.0-released.md new file mode 100644 index 0000000..da519e9 --- /dev/null +++ b/_posts/2012/2012-09-05-wicket-6.0.0-released.md @@ -0,0 +1,50 @@ +--- +layout: post +title: Apache Wicket v6.0.0 released +--- + +> "With great pleasure we announce the availability of Apache Wicket 6.0.0" +> +> -- Martijn Dashorst, Vice President, Apache Wicket + +Apache Wicket v6.0.0 is the 6th major release of the popular open source Java web framework. Numerous enhancements make Apache Wicket v6.0.0 a solid choice for web +development: + +- Out-of-the box JQuery integration +- Complete control over AJAX requests +- Improved event registration in browsers +- Support for large datasets in components +- Dependency management for client side javascript libraries +- Experimental support for websockets + +This release is available from the [usual download location (wicket-6.0.0)](http://www.apache.org/dyn/closer.cgi/wicket/6.0.0), or available through the Maven Central repository. + +Additional features include a customizable client-side API, improved feedback messages, correct packaging for OSGi compatibility and improved initialization of plugins. Highlights include: + +Java 6 required - This release moves the minimum required Java version to Java 6. This means that Wicket applications running on earlier Java versions meaning to upgrade, also need to upgrade their Java runtime. + +Revamped Wicket AJAX now leverages JQuery - Wicket's custom AJAX JavaScript library has been re-implemented using JQuery. This makes it easier to integrate JQuery plugins into Wicket applications. With the new AJAX implementation it is possible to provide your own version of JQuery should the need arise, or even to replace the whole Wicket client side AJAX implementation. + +AJAX Attributes - With the new and improved AJAX implementation, you can alter any aspect of an AJAX request through AjaxRequestAttributes. For example you can specify that the request should be executed using POST instead of GET, or that the AJAX request should be multi-part, etc. See the migration guide or the JavaDoc of AjaxRequestAttributes for all possible options. + +Browser event registration replaces inline events - Wicket now uses JavaScript event registration instead of inline attributes for AJAX components. This enables multiple event listeners to be attached to a markup tag, cleans up the rendered markup considerably and reduces the amount of generated markup. + +IDataProvider now uses long instead of int - The `IDataProvider<T>` interface and implementations now use long instead of int for index and size parameters to better line up with the Java Persistence API and other persistency frameworks. Big data is now possible with Wicket! + +`${label}` replaces `${input}` in feedback messages - Previous Wicket versions used the input that was provided by users in error messages when validations failed. This led to error messages like "1234a is not a valid number". In Wicket 6 the feedback messages use the label of the invalid form component instead. You can set the label by calling setLabel() on the form component. If no label is provided, Wicket defaults to displaying the component identifier. This changes the error message to "Phonenumber is not a valid number". + +Resources can declare dependencies - It is now much easier to create resource contributions with dependencies, for example a JQuery plugin can declare a dependency on JQuery and other resources such as embedded style sheets. Users of such resources donât have to provide these dependencies themselves, and the dependencies are linked in the appropriate order. + +Packaged resources will use minimized version automatically - When a minimized JavaScript resource is available (filename.min.js â add the .min part to the filename before the extension), Wicket will automatically use the minimized version when running in deployment mode, while using the non-minimized version for development mode. + +OSGi compatible packaging - Wicket's packaging has been made compatible with OSGi bundles by moving some classes to different packages. The full list can be found in our migration guide. This makes it much easier to deploy Wicket applications in an OSGi environment. + +Experimental websocket implementations - This release also includes two experimental websocket implementations: one using Atmosphere as a bridge for browsers and containers that don't support websockets natively and one for containers and browsers that have native websocket support. + +The complete set of changes is available in the migration guide at [http://s.apache.org/wicket-6.0-migration](http://s.apache.org/wicket-6.0-migration) + +### Availability and Oversight + +As with all Apache products, Apache Wicket v6.0.0 is released under the Apache License v2.0, and is overseen by a self-selected team of active contributors to the project. A Project Management Committee (PMC) guides the Project's day-to-day operations, including community development and product releases. Apache Wicket source code, documentation, and related resources are available at http://wicket.apache.org/ + +"Apache", "Wicket", "Apache Wicket", and "ApacheCon" are trademarks of The Apache Software Foundation. All other brands and trademarks are the property of their respective owners. \ No newline at end of file http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-09-06-cve-2012-3373.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-09-06-cve-2012-3373.md b/_posts/2012/2012-09-06-cve-2012-3373.md new file mode 100644 index 0000000..f3893c9 --- /dev/null +++ b/_posts/2012/2012-09-06-cve-2012-3373.md @@ -0,0 +1,27 @@ +--- +layout: post +title: CVE-2012-3373 - Apache Wicket XSS vulnerability +--- + +Severity: Important + +Vendor: +The Apache Software Foundation + +Versions Affected: +Apache Wicket 1.4.x and 1.5.x + +Description: +It is possible to inject JavaScript statements into an ajax link by adding an +encoded null byte to a URL pointing to a Wicket app. This could be done by sending a +legitimate user a manipulated URL and tricking the user into clicking on it. + +This vulnerability is fixed in +[Apache Wicket 1.4.21](https://wicket.apache.org/2012/09/05/wicket-1.4.21-released.html) and +[Apache Wicket 1.5.8](https://wicket.apache.org/2012/08/24/wicket-1.5.8-released.html). + +[Apache Wicket 6.0.0](https://wicket.apache.org/2012/09/05/wicket-6.0.0-released.html) is not affected. + + +Credit: +This issue was reported by Thomas Heigl. http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-10-04-wicket-6.1.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-10-04-wicket-6.1.0-released.md b/_posts/2012/2012-10-04-wicket-6.1.0-released.md new file mode 100644 index 0000000..2a16492 --- /dev/null +++ b/_posts/2012/2012-10-04-wicket-6.1.0-released.md @@ -0,0 +1,106 @@ +--- +layout: post +title: Apache Wicket 6.1.0 released +excerpt: true +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.1.0! + +This release marks the first maintenance release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. + +### New and noteworthy + +Wicket CDI has been integrated as a core module, and can be used to manage conversations in your Wicket application with ease. + +Wicket Experimental: + + * Wicket Bootstrap has been upgraded to 2.1.1 + * Several issues with Wicket Atmosphere have been resolved + +### Known issues + +This release has two known issues, which will be solved shortly in 6.1.1 and 6.2.0: + + * [WICKET-4789](https://issues.apache.org/jira/browse/WICKET-4789) + The way URLs are encoded was changed (WICKET-4645) and now the first + request (with ;jsessionid in path) generates invalid internal links. + * [WICKET-4759](https://issues.apache.org/jira/browse/WICKET-4759) + FilterForm/FilterToolbar don't work when there's more than one IColumn to + be filtered + +Any other issues will be released in 6.2.0 + +### Using this release + +With Apache Maven update your dependency to (and don't forget to update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.1.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our convenience binary package: + + * [6.1.0 sources](http://www.apache.org/dyn/closer.cgi/wicket/6.1.0) + * [6.1.0 binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.1.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.0.0, this release is a drop in replacement. If you come from a version prior to 6.0.0, please read our [Wicket 6 migration guide](http://s.apache.org/wicket-6.0-migration) found at http://s.apache.org/wicket-6.0-migration + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.1.0 + +#### Squashed bugs + + * [WICKET-4645](https://issues.apache.org/jira/browse/WICKET-4645) - encodeURL broken on Tomcat 7.0.28 + * [WICKET-4656](https://issues.apache.org/jira/browse/WICKET-4656) - Atmosphere example doesn't work due to missing 'page' when creating AjaxRequestTarget + * [WICKET-4729](https://issues.apache.org/jira/browse/WICKET-4729) - atmosphere example will stop working if opening the same url in a different tab in the same browser + * [WICKET-4732](https://issues.apache.org/jira/browse/WICKET-4732) - CssPackageResource doesn't work if the extension isn't css + * [WICKET-4734](https://issues.apache.org/jira/browse/WICKET-4734) - Button value is double escaped + * [WICKET-4735](https://issues.apache.org/jira/browse/WICKET-4735) - KittenCaptchaPanel is broken + * [WICKET-4737](https://issues.apache.org/jira/browse/WICKET-4737) - IllegalStateException on WicketFilter.init() after calling setFilterPath() + * [WICKET-4738](https://issues.apache.org/jira/browse/WICKET-4738) - DownloadLink doesn't wrap the String model used for file name nor does it detach + * [WICKET-4741](https://issues.apache.org/jira/browse/WICKET-4741) - Only complete handler (no success or failure handler) is called when Ajax link produces an exception + * [WICKET-4742](https://issues.apache.org/jira/browse/WICKET-4742) - Wicket 6 and Atmospher Integration: AtmosphereServlet does not delegate WicketFilter for Error Pages . + * [WICKET-4743](https://issues.apache.org/jira/browse/WICKET-4743) - SerializingObjectSizeOfStrategy do not use framework serializer + * [WICKET-4749](https://issues.apache.org/jira/browse/WICKET-4749) - TabbedPanel - IModel<?> initModel() + * [WICKET-4750](https://issues.apache.org/jira/browse/WICKET-4750) - AbstractDefaultAjaxBehavior.getCallbackFunction should not add the event attribute + * [WICKET-4751](https://issues.apache.org/jira/browse/WICKET-4751) - UploadProgressBar regression + * [WICKET-4753](https://issues.apache.org/jira/browse/WICKET-4753) - Resource bundles are not resolved on PriorityHeaderItems + * [WICKET-4755](https://issues.apache.org/jira/browse/WICKET-4755) - "'NEW VALUE' is not a valid Serializable" error during ajax form submission + * [WICKET-4757](https://issues.apache.org/jira/browse/WICKET-4757) - FormComponents remain invalid forever if there is no feedback panel + * [WICKET-4758](https://issues.apache.org/jira/browse/WICKET-4758) - DOM ids change of the input fields of FilterToolbar + * [WICKET-4760](https://issues.apache.org/jira/browse/WICKET-4760) - JavaScriptStripper fails with single line comments + * [WICKET-4761](https://issues.apache.org/jira/browse/WICKET-4761) - ModalWindow.closeCurrent Javascript error + * [WICKET-4763](https://issues.apache.org/jira/browse/WICKET-4763) - Page's stateless hint is initially set to 'false' + * [WICKET-4766](https://issues.apache.org/jira/browse/WICKET-4766) - multiple &lt;style&gt; tags in header are rendered incorrectly + * [WICKET-4768](https://issues.apache.org/jira/browse/WICKET-4768) - Whitespace in TabbedPanel markup causes layout issues + * [WICKET-4770](https://issues.apache.org/jira/browse/WICKET-4770) - Wicket 6: modal windows in Safari are always in drag or resize mode + * [WICKET-4773](https://issues.apache.org/jira/browse/WICKET-4773) - ComponentFeedbackPanel broken under Wicket 6.0.0 when RenderStrategy.REDIRECT_TO_RENDER + * [WICKET-4775](https://issues.apache.org/jira/browse/WICKET-4775) - PageParameters#mergeWith may loose values of the 'other' PP + * [WICKET-4780](https://issues.apache.org/jira/browse/WICKET-4780) - Using both MountedMapper and CryptoMapper causes warning + +#### Improvement + + * [WICKET-4730](https://issues.apache.org/jira/browse/WICKET-4730) - Filter component does not clear filter fields + * [WICKET-4731](https://issues.apache.org/jira/browse/WICKET-4731) - TimeField not able to work with a java.sql.Time + * [WICKET-4736](https://issues.apache.org/jira/browse/WICKET-4736) - JavaScriptFilteredIntoFooterHeaderResponse should reverse filter logic + * [WICKET-4745](https://issues.apache.org/jira/browse/WICKET-4745) - Allow to set initial state of DebugBar to expanded / collapsed + * [WICKET-4746](https://issues.apache.org/jira/browse/WICKET-4746) - Wizard component translation for pt_BR + * [WICKET-4748](https://issues.apache.org/jira/browse/WICKET-4748) - Improve WicketTester to be able to find AjaxBehaviors on second/third/... event name + +#### New Feature + + * [WICKET-3969](https://issues.apache.org/jira/browse/WICKET-3969) - Add CDI integration + +#### Task + + * [WICKET-4781](https://issues.apache.org/jira/browse/WICKET-4781) - Downgrade the warning that a rendering falls back to redirect_to_buffer to a DEBUG + \ No newline at end of file http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-10-08-wicket-6.1.1-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-10-08-wicket-6.1.1-released.md b/_posts/2012/2012-10-08-wicket-6.1.1-released.md new file mode 100644 index 0000000..fd9f8de --- /dev/null +++ b/_posts/2012/2012-10-08-wicket-6.1.1-released.md @@ -0,0 +1,55 @@ +--- +layout: post +title: Apache Wicket 6.1.1 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.1.1! + +This release marks the first patch release of Wicket 6. Starting with Wicket +6 we use semantic versioning for the future development of Wicket, and as +such no API breaks are present in this release compared to 6.1.0 and 6.0.0. + +This release fixes two bugs in 6.1.0: + +[WICKET-4789](https://issues.apache.org/jira/browse/WICKET-4789) + +The way URLs are encoded was changed (WICKET-4645) and now the first +request (with ;jsessionid in path) generates invalid internal links. + +[WICKET-4759](https://issues.apache.org/jira/browse/WICKET-4759) + +FilterForm/FilterToolbar don't work when there's more than one IColumn +to be filtered + +Any other issues will be released in 6.2.0 + +Using this release +------------------ + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.1.1</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * [http://www.apache.org/dyn/closer.cgi/wicket/6.1.1](http://www.apache.org/dyn/closer.cgi/wicket/6.1.1) + * [http://www.apache.org/dyn/closer.cgi/wicket/6.1.1/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.1.1/binaries) + +Upgrading from earlier versions +------------------------------- + +If you upgrade from 6.0.0 or 6.1.0, this release is a drop in +replacement. If you come from a version prior to 6.0.0, please +read our Wicket 6 migration guide found at [http://s.apache.org/wicket-6.0-migration](http://s.apache.org/wicket-6.0-migration) + +Have fun! + +â The Wicket team http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-10-23-wicket-6.2.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-10-23-wicket-6.2.0-released.md b/_posts/2012/2012-10-23-wicket-6.2.0-released.md new file mode 100644 index 0000000..450e7c8 --- /dev/null +++ b/_posts/2012/2012-10-23-wicket-6.2.0-released.md @@ -0,0 +1,104 @@ +--- +layout: post +title: Apache Wicket 6.2.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.2.0! + +This release marks the second minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +New and noteworthy +------------------ + +SerializableChecker has been made easier to extend. It is now much easier +to add your own checks at serialization time. For example, check whether your +LoadableDetachableModels are detached, or no Hibernate entities are referenced +directly from your component tree, etc. + +For the full changelog see the release notes attached to the end of +this announcement. + +Using this release +------------------ + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.2.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * [http://www.apache.org/dyn/closer.cgi/wicket/6.2.0](http://www.apache.org/dyn/closer.cgi/wicket/6.2.0) + * [http://www.apache.org/dyn/closer.cgi/wicket/6.2.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.2.0/binaries) + +Upgrading from earlier versions +------------------------------- + +If you upgrade from 6.0.0 or 6.1.0, this release is a drop in +replacement. If you come from a version prior to 6.0.0, please +read our Wicket 6 migration guide found at [http://s.apache.org/wicket-6.0-migration](http://s.apache.org/wicket-6.0-migration) + +Have fun! + +â The Wicket team + + +### Release Notes - Wicket - Version 6.2.0 + +#### Sub-task + + * [WICKET-4752](https://issues.apache.org/jira/browse/WICKET-4752) - Revert Wicket-4715 -Read multipart request params in WebApplication + +#### Bug + + * [WICKET-4587](https://issues.apache.org/jira/browse/WICKET-4587) - URLRenderer renderFullUrl + * [WICKET-4589](https://issues.apache.org/jira/browse/WICKET-4589) - Closing `</wicket:container>` tag is incorrectly setup as autocomponent + * [WICKET-4756](https://issues.apache.org/jira/browse/WICKET-4756) - AtmosphereWebRequest should return true on calls to #isAjax() + * [WICKET-4759](https://issues.apache.org/jira/browse/WICKET-4759) - FilterForm/FilterToolbar don't work when there's more than one IColumn to be filtered + * [WICKET-4769](https://issues.apache.org/jira/browse/WICKET-4769) - Clicking on Label of Radio doesn't update component with Ajax update + * [WICKET-4771](https://issues.apache.org/jira/browse/WICKET-4771) - Submitting value filled in DropDownChoice fails when tinymce textarea is on the page + * [WICKET-4776](https://issues.apache.org/jira/browse/WICKET-4776) - Problems with switching between HTTP/HTTPS + * [WICKET-4777](https://issues.apache.org/jira/browse/WICKET-4777) - JavaScriptReference escapes given URL + * [WICKET-4786](https://issues.apache.org/jira/browse/WICKET-4786) - AjaxTabbedPanel doesn't include constructor with model + * [WICKET-4787](https://issues.apache.org/jira/browse/WICKET-4787) - Registering resource bundles with duplicate resource references gives an NPE + * [WICKET-4788](https://issues.apache.org/jira/browse/WICKET-4788) - FilteringHeaderResponse does not unwrap PriorityHeaderItems for filtering + * [WICKET-4789](https://issues.apache.org/jira/browse/WICKET-4789) - URL rendering regression + * [WICKET-4791](https://issues.apache.org/jira/browse/WICKET-4791) - UploadProgressBar hides immediately after being shown. + * [WICKET-4792](https://issues.apache.org/jira/browse/WICKET-4792) - wickettester#startcomponent(component) doesn't call oninitialize + * [WICKET-4794](https://issues.apache.org/jira/browse/WICKET-4794) - RfcCompliantEmailAddressValidator error message not defined + * [WICKET-4796](https://issues.apache.org/jira/browse/WICKET-4796) - DatePickerTest fails because of java inconsistensy on localizing March german shortname Mrz vs Mär + * [WICKET-4797](https://issues.apache.org/jira/browse/WICKET-4797) - CheckBoxMultipleChoice loses state + * [WICKET-4801](https://issues.apache.org/jira/browse/WICKET-4801) - BaseWicketTester.executeAjaxEvent only fires one of multiple behaviors bound to a given event + * [WICKET-4806](https://issues.apache.org/jira/browse/WICKET-4806) - AjaxEditableChoiceLabel won't close select onblur + * [WICKET-4810](https://issues.apache.org/jira/browse/WICKET-4810) - CLONE - BaseWicketTester.clickLink() does not work with a ResourceLink with ResourceReference + * [WICKET-4816](https://issues.apache.org/jira/browse/WICKET-4816) - Handling of semicolons in form action URLs + * [WICKET-4818](https://issues.apache.org/jira/browse/WICKET-4818) - NullPointerException while reading the POST parameters + * [WICKET-4820](https://issues.apache.org/jira/browse/WICKET-4820) - Race condition in ResourceSettings: getResourceWatcher() is not thread safe + * [WICKET-4822](https://issues.apache.org/jira/browse/WICKET-4822) - Wicket.Event.add requires Wicket.$, but wicket-ajax-jquery is not listed as a dependency + * [WICKET-4824](https://issues.apache.org/jira/browse/WICKET-4824) - Redirect to HTTPS is using wrong port 80 if HttpsConfig with default ports 80/443 is used + +#### Improvement + + * [WICKET-4160](https://issues.apache.org/jira/browse/WICKET-4160) - Make AbstractAutoCompleteRenderer.renderHeader() and .renderFooter() non-final + * [WICKET-4772](https://issues.apache.org/jira/browse/WICKET-4772) - DataTable API and handling of AbstractToolbar + * [WICKET-4778](https://issues.apache.org/jira/browse/WICKET-4778) - Add factory methods to JavaScriptHeaderItem to create a deferred JavaScript header item. + * [WICKET-4798](https://issues.apache.org/jira/browse/WICKET-4798) - Make IteratorFilter.onFilter protected + * [WICKET-4804](https://issues.apache.org/jira/browse/WICKET-4804) - Add #setStatus(int) in AbstractResource.ResourceResponse + * [WICKET-4808](https://issues.apache.org/jira/browse/WICKET-4808) - WebClientInfo.getRemoteAddr() handling "Forwarded-For" value tokens not being ip addresses + * [WICKET-4812](https://issues.apache.org/jira/browse/WICKET-4812) - Make SerializationChecker easier for extending so custom checks can be added to it + +#### New Feature + + * [WICKET-4793](https://issues.apache.org/jira/browse/WICKET-4793) - Support Jetty 9.x websocket implementation + * [WICKET-4802](https://issues.apache.org/jira/browse/WICKET-4802) - Add functionality to be able to export DataTable content + * [WICKET-4815](https://issues.apache.org/jira/browse/WICKET-4815) - Interface to mark components with type safe models http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-11-09-wicket-1.5.9-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-11-09-wicket-1.5.9-released.md b/_posts/2012/2012-11-09-wicket-1.5.9-released.md new file mode 100644 index 0000000..df23eb7 --- /dev/null +++ b/_posts/2012/2012-11-09-wicket-1.5.9-released.md @@ -0,0 +1,18 @@ +--- +layout: post +title: Wicket 1.5.9 released +--- + +This is the nineth maintenance release of the Wicket 1.5.x series. This release brings over 48 bug fixes and improvements. + +* [Git tag](https://git-wip-us.apache.org/repos/asf/wicket/repo?p=wicket.git;a=shortlog;h=refs/tags/release/wicket.1.5.9) +* [Changelog](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310561&version=12322962) +* To use in Maven: +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>1.5.9</version> +</dependency> +{% endhighlight %} +* Download the [full distribution](http://www.apache.org/dyn/closer.cgi/wicket/1.5.9) (including source) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-11-16-wicket-6.3.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-11-16-wicket-6.3.0-released.md b/_posts/2012/2012-11-16-wicket-6.3.0-released.md new file mode 100644 index 0000000..3badb8b --- /dev/null +++ b/_posts/2012/2012-11-16-wicket-6.3.0-released.md @@ -0,0 +1,91 @@ +--- +layout: post +title: Apache Wicket 6.3.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.3.0! + +This release marks the third minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +New and noteworthy +------------------ + +This release fixes some javascript errors in IE7 and IE8 with Wicket 6. + +We have upgraded the embedded JQuery library to 1.8.2 (the most recent +stable release of JQuery). If you depend on an earlier version of +JQuery, you can instruct Wicket to use your older version. See the +[Wicket Ajax Guide](https://cwiki.apache.org/confluence/display/WICKET/Wicket+Ajax#WicketAjax-Configuration) +for more information. + +For the full changelog see the release notes attached to the end of +this announcement. + +Using this release +------------------ + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.3.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * [http://www.apache.org/dyn/closer.cgi/wicket/6.3.0](http://www.apache.org/dyn/closer.cgi/wicket/6.3.0) + * [http://www.apache.org/dyn/closer.cgi/wicket/6.3.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.3.0/binaries) + +Upgrading from earlier versions +------------------------------- + +If you upgrade from 6.0.0, 6.1.0, or 6.2.0 this release is a drop in +replacement. If you come from a version prior to 6.0.0, please +read our Wicket 6 migration guide found at [http://s.apache.org/wicket-6.0-migration](http://s.apache.org/wicket-6.0-migration) + +Have fun! + +â The Wicket team + + +### Release Notes - Wicket - Version 6.3.0 + +#### Bug + + * [WICKET-4623](https://issues.apache.org/jira/browse/WICKET-4623) - UploadProgressBar does not show up if the form submitted by AjaxButton or AjaxLink + * [WICKET-4826](https://issues.apache.org/jira/browse/WICKET-4826) - PaletteButton#onComponentTag(ComponentTag) does not call super + * [WICKET-4829](https://issues.apache.org/jira/browse/WICKET-4829) - ComponentResolvers created in app init ignore markup's namespace + * [WICKET-4836](https://issues.apache.org/jira/browse/WICKET-4836) - Unmount a page does not work if the path starts with / + * [WICKET-4837](https://issues.apache.org/jira/browse/WICKET-4837) - SmartLinkMultiLineLabel does not display email addresses or web URLs as hyperlinks + * [WICKET-4841](https://issues.apache.org/jira/browse/WICKET-4841) - Return error code 400 when an Ajax request has no base url set in header/request parameters. + * [WICKET-4842](https://issues.apache.org/jira/browse/WICKET-4842) - WicketRuntimeException when Tomcat cleans up a session later on + * [WICKET-4844](https://issues.apache.org/jira/browse/WICKET-4844) - AbstractResourceReferenceMapper doesn't escape separators in style/variation names + * [WICKET-4848](https://issues.apache.org/jira/browse/WICKET-4848) - Reporter of FeedbackMessage should not be set to 'null' on detach + * [WICKET-4850](https://issues.apache.org/jira/browse/WICKET-4850) - BaseWicketTester discards cookies with MaxAge = -1 when processing a new request + * [WICKET-4851](https://issues.apache.org/jira/browse/WICKET-4851) - IE8, IE7 javascript errors with Wicket 6 + * [WICKET-4857](https://issues.apache.org/jira/browse/WICKET-4857) - AutoCompleteTextFields submits Form if a choice is selected via enter-key + * [WICKET-4859](https://issues.apache.org/jira/browse/WICKET-4859) - Integer overflow in AbstractToolbar + * [WICKET-4864](https://issues.apache.org/jira/browse/WICKET-4864) - 'format' not set in ConversionException + * [WICKET-4865](https://issues.apache.org/jira/browse/WICKET-4865) - Page parameters not working with CryptoMapper + +#### Improvement + + * [WICKET-4831](https://issues.apache.org/jira/browse/WICKET-4831) - Append the feedback message CSS class instead of overriding it + * [WICKET-4835](https://issues.apache.org/jira/browse/WICKET-4835) - Add debug log messages in CompoundRequestMapper#mapRequest + * [WICKET-4845](https://issues.apache.org/jira/browse/WICKET-4845) - Make BasicResourceReferenceMapper public so it is easy to extend it + * [WICKET-4853](https://issues.apache.org/jira/browse/WICKET-4853) - Change FormComponent#reportRequiredError() from private to protected + * [WICKET-4856](https://issues.apache.org/jira/browse/WICKET-4856) - Support SVG extension in SecurePackageResourceGuard + * [WICKET-4863](https://issues.apache.org/jira/browse/WICKET-4863) - Customize ValidationError creation by FormComponent + * [WICKET-4867](https://issues.apache.org/jira/browse/WICKET-4867) - Detach the object before calculating its size + +#### Task + + * [WICKET-4855](https://issues.apache.org/jira/browse/WICKET-4855) - Upgrade JQuery to 1.8.2 http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2012/2012-12-14-wicket-6.4.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2012/2012-12-14-wicket-6.4.0-released.md b/_posts/2012/2012-12-14-wicket-6.4.0-released.md new file mode 100644 index 0000000..19fcf1e --- /dev/null +++ b/_posts/2012/2012-12-14-wicket-6.4.0-released.md @@ -0,0 +1,137 @@ +--- +layout: post +title: Apache Wicket 6.4.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.4.0! + +This release marks the fourth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +### New and noteworthy + +JQuery was upgraded to 1.8.3, bootstrap to 2.2.2. + +#### JSR 303 BeanValidation support + +Native support for BeanValidation (JSR 303) was added as an +experimental module and released as version 0.5. You can grab it +by using these maven coordinates: + + * org.apache.wicket:wicket-bean-validation:0.5:jar + +or by pasting in the pom snippet below: + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-bean-validation</artifactId> + <version>0.5</version> +</dependency> +{% endhighlight %} + +Note that this is an experimental module and that it is not released +under the SemVer rules. Use at your own risk. + +#### Hierarchical feedback panel + +A new kind of feedback panel was introduced: a hierarchical feedback +panel. A specialized feedback panel that only displays messages from +inside a fence defined by a container component. Instances will not +show messages coming from inside a nested fence, allowing the nesting +of these panels to work correctly without displaying the same +feedback message twice. A constructor that does not takes a fencing +component creates a catch-all panel that shows messages that do not +come from inside any fence or from the Session. + +For more information see the [FencedFeedbackPanel javadoc](http://s.apache.org/wicket-FencedFeedbackPanel). + +For the full changelog see the release notes attached to the end of +this announcement. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.4.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.4.0](http://www.apache.org/dyn/closer.cgi/wicket/6.4.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.4.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.4.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.0.0, 6.1.0, 6.2.0 or 6.3.0 this release is a drop in +replacement. If you come from a version prior to 6.0.0, please +read our Wicket 6 migration guide found at + + http://s.apache.org/wicket-6.0-migration + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.4.0 + +#### Sub-task + + * [WICKET-4880](WICKET-4880) - Make it possible to override the Ajax behavior of AjaxSubmitLink and AjaxButton + +#### Bug + + * [WICKET-4869](https://issues.apache.org/jira/browse/WICKET-4869) - Wicket-Atmosphere track message length + * [WICKET-4872](https://issues.apache.org/jira/browse/WICKET-4872) - IllegalArgumentException on ReloadingWicketFilter and inheritance markup + * [WICKET-4877](https://issues.apache.org/jira/browse/WICKET-4877) - encodeUrl fails parsing jsessionid when using root context + * [WICKET-4878](https://issues.apache.org/jira/browse/WICKET-4878) - Rendering of feedback messages fails with DebugBar in page + * [WICKET-4881](https://issues.apache.org/jira/browse/WICKET-4881) - IE 8 : error when handling Wicket Ajax Response + * [WICKET-4884](https://issues.apache.org/jira/browse/WICKET-4884) - ValidationError messages for NumberTextFields with minimum/maximum are always English + * [WICKET-4886](https://issues.apache.org/jira/browse/WICKET-4886) - Do not register Ajax timer if the component is removed + * [WICKET-4890](https://issues.apache.org/jira/browse/WICKET-4890) - Bad validation messages after WICKET-2128 + * [WICKET-4891](https://issues.apache.org/jira/browse/WICKET-4891) - UrlRenderer.renderRelativeUrl misbehavior if the filterPath is composed. + * [WICKET-4894](https://issues.apache.org/jira/browse/WICKET-4894) - Internet Explorer fails fails to properly include conditional stylesheet links added via AjaxRequestTarget + * [WICKET-4895](https://issues.apache.org/jira/browse/WICKET-4895) - WicketRuntimeException: addOrReplace for feedback panel does not clear Component.FEEDBACK_LIST - feedback from replaced component causes error. + * [WICKET-4899](https://issues.apache.org/jira/browse/WICKET-4899) - autocomplete shows strings with quotes strings as string2 with "quote" + * [WICKET-4900](https://issues.apache.org/jira/browse/WICKET-4900) - Setting a status code on an AbstractResource results in no HTTP body + * [WICKET-4908](https://issues.apache.org/jira/browse/WICKET-4908) - Wrong charset or screwed up characters in Norwegian properties-file + * [WICKET-4911](https://issues.apache.org/jira/browse/WICKET-4911) - Palette Ajax update does not work + * [WICKET-4913](https://issues.apache.org/jira/browse/WICKET-4913) - HtmlDocumentParser does not support tags containing number (e.g. h1-h6) + * [WICKET-4915](https://issues.apache.org/jira/browse/WICKET-4915) - org.apache.wicket.util.resource.Patht#find fails on Windows + * [WICKET-4916](https://issues.apache.org/jira/browse/WICKET-4916) - AbstractTree$TreeItem renderHead does not call renderHead for child TreeItems. + * [WICKET-4917](https://issues.apache.org/jira/browse/WICKET-4917) - Websockets are not working if URL has a hash in it + * [WICKET-4918](https://issues.apache.org/jira/browse/WICKET-4918) - LazyInitProxyFactory prevents using package private interfaces + * [WICKET-4920](https://issues.apache.org/jira/browse/WICKET-4920) - Rendered Url on root context with cookies disabled might result in double slash // + * [WICKET-4922](https://issues.apache.org/jira/browse/WICKET-4922) - Cloned ServletWebRequest returns wrong OriginalUrl + * [WICKET-4923](https://issues.apache.org/jira/browse/WICKET-4923) - CryptoMapper ignores original queryString parameters + +#### Improvement + + * [WICKET-4873](https://issues.apache.org/jira/browse/WICKET-4873) - Support different session id parameter + * [WICKET-4876](https://issues.apache.org/jira/browse/WICKET-4876) - CheckBoxMultipleChoice should implement getAdditionalAttributes as RadioChoice + * [WICKET-4887](https://issues.apache.org/jira/browse/WICKET-4887) - Use a Set to keep the supported wicket elements in WicketTagIdentifier + * [WICKET-4889](https://issues.apache.org/jira/browse/WICKET-4889) - Label constructor should accept Serializable as label + * [WICKET-4892](https://issues.apache.org/jira/browse/WICKET-4892) - Provide helpful exception message in RequestCycle#urlFor() + * [WICKET-4901](https://issues.apache.org/jira/browse/WICKET-4901) - AjaxPagingNaviagtionLink should provide updateAjaxAttributes like AjaxLink + * [WICKET-4902](https://issues.apache.org/jira/browse/WICKET-4902) - ConcatBundleResource should use the respective ITextResourceCompressor + * [WICKET-4924](https://issues.apache.org/jira/browse/WICKET-4924) - Websocket broadcast support does not work with OSGi + +#### New Feature + + * [WICKET-4832](https://issues.apache.org/jira/browse/WICKET-4832) - Websocket broadcast support + * [WICKET-4879](https://issues.apache.org/jira/browse/WICKET-4879) - Implementing channels in wicket-atmosphere + * [WICKET-4883](https://issues.apache.org/jira/browse/WICKET-4883) - Out of the box bean-validation (JSR 303) integration + * [WICKET-4888](https://issues.apache.org/jira/browse/WICKET-4888) - Introduce a hierarchical feedback panel (FencedFeedbackPanel) + +#### Task + + * [WICKET-4885](https://issues.apache.org/jira/browse/WICKET-4885) - Upgrade jQuery to its latest stable version (1.8.3) http://git-wip-us.apache.org/repos/asf/wicket-site/blob/8cc72bad/_posts/2013/2013-01-23-wicket-6.5.0-released.md ---------------------------------------------------------------------- diff --git a/_posts/2013/2013-01-23-wicket-6.5.0-released.md b/_posts/2013/2013-01-23-wicket-6.5.0-released.md new file mode 100644 index 0000000..2a4a7c6 --- /dev/null +++ b/_posts/2013/2013-01-23-wicket-6.5.0-released.md @@ -0,0 +1,112 @@ +--- +layout: post +title: Apache Wicket 6.5.0 released +--- + +The Apache Wicket PMC is proud to announce Apache Wicket 6.5.0! + +This release marks the fifth minor release of Wicket 6. Starting +with Wicket 6 we use semantic versioning for the future development of +Wicket, and as such no API breaks are present in this release compared +to 6.0.0. + +### New and noteworthy + +#### Behavior.onRemove(Component) + +org.apache.wicket.Behavior has a new method - #onRemove(Component). This callback method is called when a host component of +this behavior is removed from its parent. + +#### Global updaters for Ajax request attributes + +By registering a custom AjaxRequestTarget.AbstractListener the application can manipulate all +the attributes for all Ajax requests. + +Example: +{% highlight java %} +application.getAjaxRequestTargetListeners().add(new AjaxRequestTarget.AbstractListener() +{ + @Override + public void updateAjaxAttributes(AjaxRequestAttributes attributes) + { + super.updateAjaxAttributes(attributes); + attributes.setChannel(new AjaxChannel("globalAjaxChannel", AjaxChannel.Type.ACTIVE)); + } +}); +{% endhighlight %} + +Each Ajax behavior/component can override such global settings. + +### Using this release + +With Apache Maven update your dependency to (and don't forget to +update any other dependencies on Wicket projects to the same version): + +{% highlight xml %} +<dependency> + <groupId>org.apache.wicket</groupId> + <artifactId>wicket-core</artifactId> + <version>6.5.0</version> +</dependency> +{% endhighlight %} + +Or download and build the distribution yourself, or use our +convenience binary package + + * Source: [http://www.apache.org/dyn/closer.cgi/wicket/6.5.0](http://www.apache.org/dyn/closer.cgi/wicket/6.5.0) + * Binary: [http://www.apache.org/dyn/closer.cgi/wicket/6.5.0/binaries](http://www.apache.org/dyn/closer.cgi/wicket/6.5.0/binaries) + +### Upgrading from earlier versions + +If you upgrade from 6.y.z this release is a drop in +replacement. If you come from a version prior to 6.0.0, please +read our Wicket 6 migration guide found at + + http://s.apache.org/wicket-6.0-migration + +Have fun! + +â The Wicket team + +### Release Notes - Wicket - Version 6.5.0 + +#### Sub-task + + * [WICKET-4976](https://issues.apache.org/jira/browse/WICKET-4976) - WicketTester#startComponent(Component) doesn't detach the component and request cycle + +#### Bug + + * [WICKET-4906](https://issues.apache.org/jira/browse/WICKET-4906) - Form#visitFormComponents can cause ClassCastException + * [WICKET-4925](https://issues.apache.org/jira/browse/WICKET-4925) - AbstractAjaxBehavior should clean stored reference to a component on unbind + * [WICKET-4927](https://issues.apache.org/jira/browse/WICKET-4927) - Header can not be set from IRequestCycleListener#onEndRequest() + * [WICKET-4928](https://issues.apache.org/jira/browse/WICKET-4928) - Error adding links to WebSocketRequestHandler + * [WICKET-4935](https://issues.apache.org/jira/browse/WICKET-4935) - Rendered URL is resulting with double slash when using AuthenticatedWebApplication + * [WICKET-4939](https://issues.apache.org/jira/browse/WICKET-4939) - AbstractAjaxTimerBehavior never triggers if attached to WebPage + * [WICKET-4948](https://issues.apache.org/jira/browse/WICKET-4948) - Modal window does not center correctly when window is scrolled in safari + * [WICKET-4950](https://issues.apache.org/jira/browse/WICKET-4950) - ResourceStreamLocator#newResourceNameIterator isn't a factory method anymore + * [WICKET-4953](https://issues.apache.org/jira/browse/WICKET-4953) - RangeValidator#decorate mixes error keys + * [WICKET-4954](https://issues.apache.org/jira/browse/WICKET-4954) - Issue with file upload with progress bar via AJAX and Firefox + * [WICKET-4955](https://issues.apache.org/jira/browse/WICKET-4955) - SessionData violates comparison contract + * [WICKET-4956](https://issues.apache.org/jira/browse/WICKET-4956) - compareTo methods of Actions in BufferedWebResponse violate Comparable contract + * [WICKET-4959](https://issues.apache.org/jira/browse/WICKET-4959) - Notify behaviors when a component is removed from the tree + * [WICKET-4961](https://issues.apache.org/jira/browse/WICKET-4961) - wicket ajax submit does not serialize elements of parental forms + * [WICKET-4962](https://issues.apache.org/jira/browse/WICKET-4962) - AjaxFormChoiceComponentUpdatingBehavior cannot be triggered with BaseWicketTester#executeAjaxEvent() + * [WICKET-4965](https://issues.apache.org/jira/browse/WICKET-4965) - NPE when stopping Tomcat + * [WICKET-4968](https://issues.apache.org/jira/browse/WICKET-4968) - NPE in FencedFeedbackPanel#onRemove + * [WICKET-4971](https://issues.apache.org/jira/browse/WICKET-4971) - AtmosphereEventSubscriptionCollector is slow + * [WICKET-4973](https://issues.apache.org/jira/browse/WICKET-4973) - AbstractRequestLogger - infinite ArrayIndexOutOfBoundsException when requestWindow size is 0 + * [WICKET-4975](https://issues.apache.org/jira/browse/WICKET-4975) - client side memory leak on date picker + * [WICKET-4986](https://issues.apache.org/jira/browse/WICKET-4986) - wicket-ajax-jquery.js fails with 'member not found' on IE for delayed ajax requests + +#### Improvement + + * [WICKET-4919](https://issues.apache.org/jira/browse/WICKET-4919) - AjaxLazyLoadPanel needs a method to add components to the AjaxRequestTarget when the component is rendered + * [WICKET-4933](https://issues.apache.org/jira/browse/WICKET-4933) - Palette does not handle disabled choices correctly + * [WICKET-4937](https://issues.apache.org/jira/browse/WICKET-4937) - Add IResponseFilter that can filter out invalid XML characters + * [WICKET-4940](https://issues.apache.org/jira/browse/WICKET-4940) - Make MountedMapper#getMatchedSegmentSizes(url) protected + * [WICKET-4957](https://issues.apache.org/jira/browse/WICKET-4957) - Listener needed for registration and removal of pages + * [WICKET-4958](https://issues.apache.org/jira/browse/WICKET-4958) - It should be possible to manipulate AjaxRequestAttributes globally + * [WICKET-4963](https://issues.apache.org/jira/browse/WICKET-4963) - ComponentModel "setObject" methods should take generic "T" type instead of "Object" + * [WICKET-4970](https://issues.apache.org/jira/browse/WICKET-4970) - Move the logic for creating the proper PackageResource from PackageResourceReference to ResourceReferenceRegistry + * [WICKET-4982](https://issues.apache.org/jira/browse/WICKET-4982) - StatelessChecker: add helpful information to find stateful behavior (patch included) + * [WICKET-4983](https://issues.apache.org/jira/browse/WICKET-4983) - extra recursion on Wicket.DOM.get
![http://wicket.apache.org/learn/books/awc.png"](http://wicket.apache.org/learn/books/awc.png"){kind=link}