[
https://issues.apache.org/jira/browse/WICKET-5094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15439280#comment-15439280
]
ASF subversion and git services commented on WICKET-5094:
---------------------------------------------------------
Commit 4216e09a4cf23179cf9de3a23b1ad989caf7da91 in wicket's branch
refs/heads/master from [~mgrigorov]
[ https://git-wip-us.apache.org/repos/asf?p=wicket.git;h=4216e09 ]
WICKET-6161 SecuritySettings.setEnforceMounts() should be applicable for all
kind of pages
Revert 74e7767635b5f1f20c61c07be34c4141e1da2571 from WICKET-5094 and update
javadocs
> ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted
> bookmarkable pages
> ------------------------------------------------------------------------------------------------
>
> Key: WICKET-5094
> URL: https://issues.apache.org/jira/browse/WICKET-5094
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 6.6.0, 1.5.10
> Reporter: Sven Meier
> Assignee: Sven Meier
> Fix For: 6.7.0, 1.5.11
>
>
> ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent
> access to mounted-pages via BookmarkableMapper, e.g. when Page1.class is
> mounted:
> http://localhost:8080/niceurl/a/nice/path/to/the/first/page
> ... then the following url will not be accepted:
>
> http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
> But starting with Wicket 1.5.x access to *all* non-mounted pages via
> BookmarkableMapper is prevented, i.e. no url
> "http://localhost:8080/niceurl/wicket/bookmarkable/*"; is matched.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
