[
https://issues.apache.org/jira/browse/WICKET-5977?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15464235#comment-15464235
]
Pedro Santos commented on WICKET-5977:
--------------------------------------
[~mgrigorov], the currently logic agreed on WICKET-5326 looks OK
[~vitiate], by mounting TestPage page to "test" you are giving it a specific
name. By using CryptoMapper you are throwing it away, so what is the point into
mount it in the first place?
> CryptoMapper does not encrypt query parameters for BookmarkablePageLink
> -----------------------------------------------------------------------
>
> Key: WICKET-5977
> URL: https://issues.apache.org/jira/browse/WICKET-5977
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 6.18.0
> Environment: Windows 7 x64
> Reporter: Jesse Bonzo
> Priority: Minor
> Labels: bookmarkable, link, security
> Attachments: WicketCryptoTest.zip
>
>
> In 6.17, mounting with CryptoMapper resulted in an encrypted url when page
> parameters are passed to a BookmarkablePageLink.
> eg
> <a wicket:id="testPageLink" href="./Test?test1=testing">Test Page Link</a>
> became
> <a wicket:id="testPageLink"
> href="./WJv23oU4t3ZeiLLpNT81ezNvA-L53GFM/WJvf2">Test Page Link</a>
> In 6.18+ the link stays as is.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
