This is an automated email from the ASF dual-hosted git repository.
dashorst pushed a change to branch wicket-10.x
in repository https://gitbox.apache.org/repos/asf/wicket.git
from 8df6f5133f Port build-versions.py to Python 3 and read its modules
from the poms
new b6afceb776 Escape the backslash in JavaScriptUtils#escapeQuotes
new 195b89c9cd Ask IAuthorizationStrategy about a resource served by a
component
new e254a030bf Take upload details of FileUploadToResourceField from the
stored files
new 6a9f1e33f2 Only turn http, https and ftp URLs into links in
DefaultLinkParser
new 9d23805cd0 Escape the window name in AjaxNewWindowNotifyingBehavior
new 63a66804e4 Re-evaluate the RENDER authorization on a freshly created
page
new 1fc739ca8e Check that the component submitting a form may be invoked
new 4c1d83d306 Judge a resumed destination on the origin that chose it
new 37d482aac8 Ask the package resource guard about the resource that was
located
new d6587d2971 Renew the session id on every sign in
new 4a2b39a1e6 Ask IAuthorizationStrategy about the WebSocketResource a
client connects to
new 9901194e9a Resolve a WebSocket message against the live HTTP session,
not a copy of it
new ce96b0578a Pass a client message to a WebSocketBehavior only where the
client may invoke it
new f9b1c0dfc6 Sign the upload settings with an HMAC instead of the
configured crypt
new ed3f3e6fb0 Move the popup target escaping from PopupSettings to the
links
new e629876c59 Restrict the characters a component id and a markup id may
contain
new 522be5e1c3 Escape the starting text of the upload progress bar
new 91828b92bc Escape the css class the filter form writes into its hidden
fields
new 3dd5ffa788 Say in the javadoc that a listener url is written into the
script as it stands
new 49cdc0aaae Pin the JavaScript a markup id is written into
new e21266a853 Keep the upload progress bar instance in a map keyed by the
markup id
new 3cea021af6 Reject '&' in a component id and a markup id
new ec5f1d19b6 Allow brackets and parentheses in a component id
new 4e13684ab4 Escape the css class the form writes into its hidden fields
new fa6b3f4d67 Ask the class loaders that can see the application for the
markup's class
new 5acc420e0c Added CHANGELOG for release 10.12.0
new acbb0cbdd5 Fix the release script failures found while releasing 9.25.0
The 27 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
CHANGELOG-10.x | 26 ++
build-versions.py | 22 +-
release.sh | 15 +-
.../authentication/AuthenticatedWebSession.java | 12 +-
.../role/annotations/AuthorizeResource.java | 6 +
.../authentication/SignInSessionIdTest.java | 182 ++++++++
.../annotations/AnnotationsRoleResourceTest.java | 220 +++++++++
.../metadata/MetaDataRoleFormSubmitterTest.java | 197 ++++++++
.../MetaDataRoleFreshPageListenerTest.java | 192 ++++++++
.../apache/wicket/ComponentIdCharactersTest.java | 232 ++++++++++
.../wicket/MarkupIdInGeneratedJavaScriptTest.java | 100 ++++
.../ajax/AjaxNewWindowNotifyingBehaviorTest.java | 140 ++++++
.../request/handler/ListenerOnFreshPageTest.java | 463 ++++++++++++++++++
.../ComponentResourceAuthorizationTest.java | 489 +++++++++++++++++++
.../core/util/string/JavaScriptUtilsTest.java | 18 +-
.../PackageResourceGuardForeignLoaderTest.java | 231 +++++++++
.../wicket/markup/html/PackageResourceTest.java | 152 ++++++
.../apache/wicket/markup/html/ReportPanel_nl.html | 3 +
...ithAjaxUpdatePanel.java => ReportPanel_nl.java} | 12 +-
.../apache/wicket/markup/html/ReportPanel_v2.html | 3 +
...ithAjaxUpdatePanel.java => ReportPanel_v2.java} | 14 +-
.../wicket/markup/html/ReportPanel_v2_ja.html | 3 +
...TextAreaTest.java => FormHiddenFieldsTest.java} | 59 +--
.../html/form/FormSubmitterNotAllowedTest.java | 515 +++++++++++++++++++++
.../html/form/upload/MultiFileUploadFieldTest.java | 34 ++
.../FileUploadToResourceFieldSecurityTest.java | 283 ++++++++++-
.../PopupSettingsTest.java} | 36 +-
.../wicket/markup/html/nonComponent_snippet.html | 1 +
.../http/intercept/HomePage.html} | 4 +-
.../http/intercept/HomePage.java} | 7 +-
.../http/intercept/InterceptedSession.java} | 29 +-
.../wicket/protocol/http/intercept/LoginPage.html | 5 +
.../http/intercept/LoginPage.java} | 24 +-
.../intercept/ResumedDestinationIsolationTest.java | 424 +++++++++++++++++
.../protocol/http/intercept/SecureFormPage.html | 5 +
.../http/intercept/SecureFormPage.java} | 24 +-
.../protocol/http/intercept/SecureLinkPage.html | 5 +
.../http/intercept/SecureLinkPage.java} | 16 +-
.../protocol/http/intercept/SecureRenderPage.html | 3 +
.../http/intercept/SecureRenderPage.java} | 7 +-
.../src/main/java/org/apache/wicket/Component.java | 104 ++++-
.../apache/wicket/DefaultMarkupIdGenerator.java | 5 +
.../java/org/apache/wicket/IMarkupIdGenerator.java | 7 +
.../RestartResponseAtInterceptPageException.java | 70 ++-
.../ajax/AjaxNewWindowNotifyingBehavior.java | 10 +-
.../authorization/IAuthorizationStrategy.java | 24 +-
.../request/handler/ListenerRequestHandler.java | 64 ++-
.../wicket/core/util/string/JavaScriptUtils.java | 39 +-
.../wicket/markup/html/PackageResourceGuard.java | 46 +-
.../org/apache/wicket/markup/html/form/Form.java | 92 +++-
.../html/form/upload/MultiFileUploadField.java | 4 +-
.../resource/AbstractFileUploadResource.java | 63 ++-
.../upload/resource/FileUploadToResourceField.java | 135 ++++--
.../image/resource/LocalizedImageResource.java | 28 +-
.../wicket/markup/html/link/ExternalLink.java | 6 +-
.../org/apache/wicket/markup/html/link/Link.java | 6 +-
.../wicket/markup/html/link/PopupSettings.java | 17 +-
.../wicket/markup/html/link/ResourceLink.java | 30 +-
.../ResourceIsolationRequestCycleListener.java | 216 ++++++++-
.../request/component/IRequestableComponent.java | 14 +-
.../apache/wicket/request/resource/IResource.java | 10 +-
.../wicket/request/resource/PackageResource.java | 187 +++++++-
.../org/apache/wicket/settings/PageSettings.java | 9 +-
.../extensions/ajax/AjaxDownloadBehavior.java | 24 +-
.../markup/html/form/upload/UploadProgressBar.java | 5 +-
.../ajax/markup/html/form/upload/progressbar.js | 1 +
.../ajax/markup/html/modal/TrapFocusBehavior.java | 4 +-
.../markup/html/basic/DefaultLinkParser.java | 28 +-
.../markup/html/basic/SmartLinkLabel.java | 3 +-
.../markup/html/basic/SmartLinkMultiLineLabel.java | 3 +-
.../repeater/data/table/filter/FilterForm.java | 2 +-
.../AjaxDownloadResourceAuthorizationTest.java | 265 +++++++++++
.../AjaxEditableLabelErrorMessageEscapeTest.java | 78 ++++
.../html/form/upload/UploadProgressBarTest.java | 133 ++++++
.../markup/html/modal/TrapFocusBehaviorTest.java | 75 ++-
.../markup/html/repeater/AjaxListPanelTest.java | 55 +++
.../markup/html/basic/DefaultLinkParserTest.java | 62 +++
.../markup/html/basic/SmartLinkLabelTest.java | 104 +++++
.../ExportToolbarResourceAuthorizationTest.java | 155 +++++++
.../repeater/data/table/filter/FilterFormTest.java | 37 ++
.../wicket/protocol/ws/WebSocketSettings.java | 9 +
.../ws/api/AbstractWebSocketProcessor.java | 94 ++++
.../wicket/protocol/ws/api/HttpSessionCopy.java | 7 +
.../wicket/protocol/ws/api/ServletRequestCopy.java | 37 +-
.../wicket/protocol/ws/api/WebSocketBehavior.java | 65 ++-
.../wicket/protocol/ws/api/WebSocketResource.java | 29 ++
.../ws/api/ServletRequestCopySessionTest.java | 92 ++++
.../wicket-native-websocket-tester/pom.xml | 5 +
.../ws/tester/TestWebSocketConnection.java | 20 +
.../protocol/ws/tester/TestWebSocketProcessor.java | 17 +-
.../wicket/protocol/ws/tester/WebSocketTester.java | 31 +-
.../AnnotationsRoleWebSocketResourceTest.java | 200 ++++++++
.../protocol/ws/tester/TestWebSocketResource.java | 21 +
.../WebSocketBehaviorCanCallListenerTest.java | 281 +++++++++++
.../tester/WebSocketResourceAuthorizationTest.java | 291 ++++++++++++
.../ws/tester/WebSocketSessionLifetimeTest.java | 368 +++++++++++++++
.../ws/tester/WebSocketTesterProcessorTest.java | 2 +-
.../ws/tester/WebSocketTesterResourceTest.java | 3 +-
.../nativewebsockets/nativewebsockets_2.adoc | 6 +
.../nativewebsockets/nativewebsockets_5.adoc | 3 +
.../src/main/asciidoc/security/security_5.adoc | 2 +
101 files changed, 7660 insertions(+), 356 deletions(-)
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authentication/SignInSessionIdTest.java
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authorization/strategies/role/annotations/AnnotationsRoleResourceTest.java
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authorization/strategies/role/metadata/MetaDataRoleFormSubmitterTest.java
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authorization/strategies/role/metadata/MetaDataRoleFreshPageListenerTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/ComponentIdCharactersTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/MarkupIdInGeneratedJavaScriptTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/ajax/AjaxNewWindowNotifyingBehaviorTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/core/request/handler/ListenerOnFreshPageTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/core/request/handler/resource/ComponentResourceAuthorizationTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/PackageResourceGuardForeignLoaderTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/ReportPanel_nl.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/{TransparentWithAjaxUpdatePanel.java
=> ReportPanel_nl.java} (77%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/ReportPanel_v2.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/{TransparentWithAjaxUpdatePanel.java
=> ReportPanel_v2.java} (69%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/ReportPanel_v2_ja.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/form/{TextAreaTest.java
=> FormHiddenFieldsTest.java} (56%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/form/FormSubmitterNotAllowedTest.java
copy
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/{basic/SimpleResponsePageClassTest.java
=> link/PopupSettingsTest.java} (57%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/markup/html/nonComponent_snippet.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/{markup/html/internal/EnclosurePageExpectedResult_4.html
=> protocol/http/intercept/HomePage.html} (60%)
copy
wicket-core-tests/src/test/java/org/apache/wicket/{core/util/tester/apps_2/LoginPage.java
=> protocol/http/intercept/HomePage.java} (87%)
copy
wicket-core-tests/src/test/java/org/apache/wicket/{intercept/MySession.java =>
protocol/http/intercept/InterceptedSession.java} (69%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/protocol/http/intercept/LoginPage.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/{stateless/StatelessPageWithForm.java
=> protocol/http/intercept/LoginPage.java} (70%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/protocol/http/intercept/ResumedDestinationIsolationTest.java
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/protocol/http/intercept/SecureFormPage.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/{markup/html/form/feedback/FeedbackFormPage.java
=> protocol/http/intercept/SecureFormPage.java} (69%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/protocol/http/intercept/SecureLinkPage.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/{stateless/StatelessComponentPage.java
=> protocol/http/intercept/SecureLinkPage.java} (77%)
create mode 100644
wicket-core-tests/src/test/java/org/apache/wicket/protocol/http/intercept/SecureRenderPage.html
copy
wicket-core-tests/src/test/java/org/apache/wicket/{DisabledComponentPage2.java
=> protocol/http/intercept/SecureRenderPage.java} (86%)
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/AjaxDownloadResourceAuthorizationTest.java
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/markup/html/AjaxEditableLabelErrorMessageEscapeTest.java
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/markup/html/form/upload/UploadProgressBarTest.java
copy
wicket-core-tests/src/test/java/org/apache/wicket/core/util/tester/WicketTesterSessionInvalidateTest.java
=>
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/markup/html/modal/TrapFocusBehaviorTest.java
(50%)
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/markup/html/basic/SmartLinkLabelTest.java
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/markup/html/repeater/data/table/export/ExportToolbarResourceAuthorizationTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-core/src/test/java/org/apache/wicket/protocol/ws/api/ServletRequestCopySessionTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-tester/src/test/java/org/apache/wicket/protocol/ws/tester/AnnotationsRoleWebSocketResourceTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-tester/src/test/java/org/apache/wicket/protocol/ws/tester/WebSocketBehaviorCanCallListenerTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-tester/src/test/java/org/apache/wicket/protocol/ws/tester/WebSocketResourceAuthorizationTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-tester/src/test/java/org/apache/wicket/protocol/ws/tester/WebSocketSessionLifetimeTest.java