Github user svenmeier commented on the issue:
https://github.com/apache/wicket/pull/294
Ha, that's really some crufty code :)
Just noticed that you filed the issue for Wicket 6.x - note that we will
only apply security fixes for that version.---
