svenmeier commented on issue #378: WICKET-6688 add RFC support (to avoid unsafe 
eval)
URL: https://github.com/apache/wicket/pull/378#issuecomment-524739324
 
 
   Yes, this concerns any JS that is added during an ajax call.
   If a component has an attached AjaxBehavior, setting it visible is 
sufficient to trigger an JS evaluation - via AjaxCallListeners this might 
contain a plethora of JS snippets.
   
   How would you 'register' all these?
   Until each an every of these cases (in Wicket's code and all users' code) 
are migrated, you'll need <evaluate> and thus nobody will use this RFC 
feature.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to