sorry for double posting, here are the first results: CSPNonceHeaderResponseDecorator was set up, but breakpoint in it's `render` method wasn't hit something weird ....
On Sat, 3 Oct 2020 at 08:47, Maxim Solodovnik <solomax...@gmail.com> wrote: > Hello All, > > I have started testing this new release yesterday > Checksum and signature as well as local build from sources are OK > > BUT my main application is not working at all due to zero resources are > loaded due to CSP errors > (we do have CSP rules in charge and CSP enabled) > Everything works as expected in Wicket 9.0.0 > > Are there any migration guides or something like this? > Advise on where should I start digging is highly appreciated > > p.s. I should test SNAPSHOTs earlier :((( > > On Sat, 3 Oct 2020 at 02:48, Andrea Del Bene <an.delb...@gmail.com> wrote: > >> This is a vote to release Apache Wicket 9.1.0 >> >> Please download the source distributions found in our staging area >> linked below. >> >> I have included the signatures for both the source archives. This vote >> lasts for 72 hours minimum. >> >> [ ] Yes, release Apache Wicket 9.1.0 >> [ ] No, don't release Apache Wicket 9.1.0, because ... >> >> Distributions, changelog, keys and signatures can be found at: >> >> https://dist.apache.org/repos/dist/dev/wicket/9.1.0 >> >> Staging repository: >> >> https://repository.apache.org/content/repositories/orgapachewicket-1153/ >> >> The binaries are available in the above link, as are a staging >> repository for Maven. Typically the vote is on the source, but should >> you find a problem with one of the binaries, please let me know, I can >> re-roll them some way or the other. >> >> Staging git repository data: >> >> Repository: g...@github.com:bitstorm/wicket.git >> Branch: build/wicket-9.1.0 >> Release tag: rel/wicket-9.1.0 >> >> >> ======================================================================== >> >> The signatures for the source release artefacts: >> >> >> Signature for apache-wicket-9.1.0.zip: >> >> -----BEGIN PGP SIGNATURE----- >> >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl93Wc8ACgkQh48B+qjT >> VuHC7w//dRcN3FzJ565Wqk+oi9bTd6DiFQgNQPK5YzyJ3D8PrL7WJh50V7MmE3OS >> Sv1JgMpnE5nNQXwxG95rrDYVoNU9CMcMML1sFzsYyJndbZzQCnRS+ICm7ngslUjZ >> dc92bEsTqJcL8pj1W3wSqmjdgFqD8FGRqRwkO1NI4KC9/TIh3N2WwhwAZALPfs4r >> X7yo+UQbpjwRLcSbOf+x4qFQJV7p6xES7XEK5CSrqqZzHCu7yi/YCsbk9tevN4g5 >> 7czDeBbW/6oz0b7n47k1XZemzgldwULFk5fzo75eau+Wxn+zcWCcOLAq6PrkuqKF >> 6+3kVo4nFeX+6MYyTPtM80e/mz5o9MyhpZB7Qz5PEboqr1he3OW/FezC0D1dvfAU >> x9YSGtOPOotveLq8P0w89PUwV2SI0UsrdL/vymhvZZf2F5ZmpR41cYd8hCr6FzSQ >> zNLqBc32r7DyhncDIL9eHlDiDrFcU8viXWdX8+RWHx/V2eqloExk+1pS1xNFlACH >> X9vBFVB9CGVXeeYrRiBiBsz8iueCh2GCdJp/paCLFod5R3KxzKnLzthIajIcoL8v >> tLuXSiqeHJip/A/eDnmFy8ROZOkq5UDUVEyVp5fmtyERFBuWk4LmAZuFe7sAu1Rm >> GJdKzRuDlACFZWd5JKzBO77XsvIcBGC1Dg+AmGmYGGddBNMlvTU= >> =pBMm >> -----END PGP SIGNATURE----- >> >> Signature for apache-wicket-9.1.0.tar.gz: >> >> -----BEGIN PGP SIGNATURE----- >> >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl93Wc4ACgkQh48B+qjT >> VuFisw//WCUwQEK4/yaguX948uGShjASOIf2N+umS+68tQRbrefNVpoTk3E1btvH >> kfZfx9JwZNAxu0W+9d4edcP/CY0cQ/Fl9kyIwCMokaZ+T6Uf74WKs+fT3klhKEY2 >> HFj/xP5VgeCr1BecP709qutJMJ37RHre2iZRGOdALn+gV3T+A9rT8XVx8dMCqQ7Z >> EjETgvZVpuaVbl4evCbUdsX5fjICVH0VhkFNcKGj0F8fQ5mIubVds/NpF2n0+ie0 >> blkUOqhRRniYcFPoaQKm8IrCRCKcwW5o67pthFaejJOz5wMrEJP0vIeVzY0bLHZL >> gzHWOU1wF++NB3WeA4+a7j6RjxDuLFTvABjlStRhs3mAlan93alFxdCYl7RWI6SX >> HtsVd0lW8Ug54zSVi+zCQbcg3AVFpZxpvL5URk+p40L03aPWh8JNbghffpo/j167 >> EKp81PEcSYXtMhjdNXbVHP1NKZmsFJgSKcx3TLuoaOVDuCgOSw+tg3tQjOcOiqak >> 0AZRamhZartVZ22BRuToAEQpP4c0iqC6Qq/2ZwSsKi77AYW7Vppdo/NExm2cFfIs >> RlA8xoefyxif/OskR+MpOZZHttNi5a9MRbcTUmkp5xsEijHZOJjUIVv5cAkOQKNo >> lfO006p8maAu09tkkEYUyVq0P5KQ0kgWNp0u3JsJdxzHlSVqxmk= >> =Hoxj >> -----END PGP SIGNATURE----- >> >> ======================================================================== >> >> CHANGELOG for 9.1.0: >> >> ** Bug >> >> * [WICKET-6702] - AsynchronousPageStore with >> NotDetachedModelChecker - "Not detached model found" exception on >> several fast sequential Ajax calls >> * [WICKET-6802] - FilePageStore writing to >> UserDefinedFileAttributeView might be null >> * [WICKET-6803] - wicket-objectsizeof-agent has no valid automatic >> module name >> * [WICKET-6806] - CSP header response decorator breaks >> JavaScriptFilteredIntoFooterHeaderResponse >> * [WICKET-6808] - Cannot add page to AjaxRequestTarget >> * [WICKET-6810] - Asynchronous+encrypted pagestore leads to >> WicketRuntimeException >> * [WICKET-6813] - Setting child-src does not update frame-src after >> initial assignment >> * [WICKET-6818] - NPE in WicketEndpoint onClose >> * [WICKET-6822] - AsynchronousPageStore Potential Memory Leak >> * [WICKET-6825] - wicket-ioc 9.0.0 throws IAE with JDK14, still >> includes outdated ASM 7.1.0 in cglib-nodep >> * [WICKET-6837] - Jupiter engine transitively included in war file >> >> ** New Feature >> >> * [WICKET-6805] - Add Cross-Origin Opener Policy and Cross-Origin >> Embedder Policy support >> >> ** Improvement >> >> * [WICKET-6786] - CsrfPreventionRequestCycleListener should support >> Fetch Metadata Request Headers >> * [WICKET-6807] - Fake Submitting Button >> * [WICKET-6821] - Completely disable CSP support >> * [WICKET-6824] - Use concatenation instead of String.format for >> frequently called methods >> * [WICKET-6826] - Improve performance and reduce allocations for >> Behaviors >> * [WICKET-6827] - Improve performance of Strings.join and >> Strings.replaceAll >> * [WICKET-6828] - Wrong tree branch icon with hidden children >> * [WICKET-6829] - Use String.isEmpty() instead of "".equals(...) >> * [WICKET-6830] - Convert Behaviors into a static utility class to >> reduce allocations >> * [WICKET-6831] - Try to flush the response before detach >> * [WICKET-6833] - Reduce allocations when merging page parameters >> * [WICKET-6835] - Improve performance of >> AbstractMapper.getPlaceholder >> * [WICKET-6838] - Improve performance of Strings.split >> >> > > -- > Best regards, > Maxim > -- Best regards, Maxim
