Thanks to you Sven and to all the other contributors!

On 3/20/19 2:39 PM, Sven Meier (JIRA) wrote:
     [ 
https://issues.apache.org/jira/browse/WICKET-6559?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16797178#comment-16797178
 ]

Sven Meier commented on WICKET-6559:
------------------------------------

Master contains an implementation based on the new IPageStore API.

Thankfully [~papegaaij] has helped in the actual security aspects.

Encrypted page store
--------------------

                 Key: WICKET-6559
                 URL: https://issues.apache.org/jira/browse/WICKET-6559
             Project: Wicket
          Issue Type: New Feature
          Components: wicket
            Reporter: Emond Papegaaij
            Priority: Major

To make it virtually impossible to tamper with any serialized data on disk, 
Wicket should encrypt the data with a key bound to the user session. This also 
prevents accidental leakage of sensitive data (such as passwords) via 
serialized form contents.


--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to