[
https://issues.apache.org/jira/browse/ISIS-846?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dan Haywood resolved ISIS-846.
------------------------------
Resolution: Fixed
Throwing an ObjectMember.AuthorizationException will cause the stack trace to
be suppressed.
This is used by ISIS-883 (prevent hacking URLs to invoke actions) and also in
EntityPage to prevent an attacker from hacking likely looking entity URLs.
> Enhance ExceptionRecognizer so that the stack trace can be suppressed in
> certain circumstances (for security)
> -------------------------------------------------------------------------------------------------------------
>
> Key: ISIS-846
> URL: https://issues.apache.org/jira/browse/ISIS-846
> Project: Isis
> Issue Type: Improvement
> Components: Core
> Affects Versions: viewer-wicket-1.6.0, core-1.6.0
> Reporter: Dan Haywood
> Assignee: Dan Haywood
> Priority: Minor
> Fix For: viewer-wicket-1.7.0, core-1.7.0
>
>
> See http://isis.markmail.org/thread/xrlhfx5xii6ndel4 on the dev list.
> This overlaps (or could) with ISIS-884
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
