[ 
https://issues.apache.org/jira/browse/WICKET-6376?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16032084#comment-16032084
 ] 

ASF subversion and git services commented on WICKET-6376:
---------------------------------------------------------

Commit 3c9985ec5c2ce7526de5fe75afb959ca8849719c in wicket's branch 
refs/heads/wicket-7.x from [~mgrigorov]
[ https://git-wip-us.apache.org/repos/asf?p=wicket.git;h=3c9985e ]

WICKET-6376: allow non-http(s) uris in ajax redirects

Add JS unit tests

(cherry picked from commit 0491709c1ad9720f120ed7ecad21d205c8be5470)


> Ajax redirects to non http(s)-urls are interpreted as relative
> --------------------------------------------------------------
>
>                 Key: WICKET-6376
>                 URL: https://issues.apache.org/jira/browse/WICKET-6376
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 7.7.0, 8.0.0-M6
>            Reporter: Emond Papegaaij
>            Priority: Minor
>             Fix For: 7.8.0, 8.0.0-M7
>
>
> wicket-ajax-jquery.js (processAjaxResponse) only understands http:// and 
> https:// as schemes. This makes it impossible to redirect to other schemes, 
> like chrome-extension://. I propose to change the regular expression to:
> {code}
> var withScheme  = /^[a-z][a-z0-9+.-]*:\/\//;  // checks whether the string 
> starts with a scheme
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to