This vote fails due to a regression on CSP support.

On Sat, Oct 3, 2020 at 8:58 PM Andrea Del Bene <an.delb...@gmail.com> wrote:

> Thank you Maxim for your accurate feedback!
>
> On Sat, Oct 3, 2020, 3:47 AM Maxim Solodovnik <solomax...@gmail.com>
> wrote:
>
>> Hello All,
>>
>> I have started testing this new release yesterday
>> Checksum and signature as well as local build from sources are OK
>>
>> BUT my main application is not working at all due to zero resources are
>> loaded due to CSP errors
>> (we do have CSP rules in charge and CSP enabled)
>> Everything works as expected in Wicket 9.0.0
>>
>> Are there any migration guides or something like this?
>> Advise on where should I start digging is highly appreciated
>>
>> p.s. I should test SNAPSHOTs earlier :(((
>>
>> On Sat, 3 Oct 2020 at 02:48, Andrea Del Bene <an.delb...@gmail.com>
>> wrote:
>>
>> > This is a vote to release Apache Wicket 9.1.0
>> >
>> > Please download the source distributions found in our staging area
>> > linked below.
>> >
>> > I have included the signatures for both the source archives. This vote
>> > lasts for 72 hours minimum.
>> >
>> > [ ] Yes, release Apache Wicket 9.1.0
>> > [ ] No, don't release Apache Wicket 9.1.0, because ...
>> >
>> > Distributions, changelog, keys and signatures can be found at:
>> >
>> >      https://dist.apache.org/repos/dist/dev/wicket/9.1.0
>> >
>> > Staging repository:
>> >
>> >
>> https://repository.apache.org/content/repositories/orgapachewicket-1153/
>> >
>> > The binaries are available in the above link, as are a staging
>> > repository for Maven. Typically the vote is on the source, but should
>> > you find a problem with one of the binaries, please let me know, I can
>> > re-roll them some way or the other.
>> >
>> > Staging git repository data:
>> >
>> >      Repository:  g...@github.com:bitstorm/wicket.git
>> >      Branch:      build/wicket-9.1.0
>> >      Release tag: rel/wicket-9.1.0
>> >
>> >
>> > ========================================================================
>> >
>> >      The signatures for the source release artefacts:
>> >
>> >
>> > Signature for apache-wicket-9.1.0.zip:
>> >
>> >      -----BEGIN PGP SIGNATURE-----
>> >
>> > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl93Wc8ACgkQh48B+qjT
>> > VuHC7w//dRcN3FzJ565Wqk+oi9bTd6DiFQgNQPK5YzyJ3D8PrL7WJh50V7MmE3OS
>> > Sv1JgMpnE5nNQXwxG95rrDYVoNU9CMcMML1sFzsYyJndbZzQCnRS+ICm7ngslUjZ
>> > dc92bEsTqJcL8pj1W3wSqmjdgFqD8FGRqRwkO1NI4KC9/TIh3N2WwhwAZALPfs4r
>> > X7yo+UQbpjwRLcSbOf+x4qFQJV7p6xES7XEK5CSrqqZzHCu7yi/YCsbk9tevN4g5
>> > 7czDeBbW/6oz0b7n47k1XZemzgldwULFk5fzo75eau+Wxn+zcWCcOLAq6PrkuqKF
>> > 6+3kVo4nFeX+6MYyTPtM80e/mz5o9MyhpZB7Qz5PEboqr1he3OW/FezC0D1dvfAU
>> > x9YSGtOPOotveLq8P0w89PUwV2SI0UsrdL/vymhvZZf2F5ZmpR41cYd8hCr6FzSQ
>> > zNLqBc32r7DyhncDIL9eHlDiDrFcU8viXWdX8+RWHx/V2eqloExk+1pS1xNFlACH
>> > X9vBFVB9CGVXeeYrRiBiBsz8iueCh2GCdJp/paCLFod5R3KxzKnLzthIajIcoL8v
>> > tLuXSiqeHJip/A/eDnmFy8ROZOkq5UDUVEyVp5fmtyERFBuWk4LmAZuFe7sAu1Rm
>> > GJdKzRuDlACFZWd5JKzBO77XsvIcBGC1Dg+AmGmYGGddBNMlvTU=
>> > =pBMm
>> > -----END PGP SIGNATURE-----
>> >
>> > Signature for apache-wicket-9.1.0.tar.gz:
>> >
>> >      -----BEGIN PGP SIGNATURE-----
>> >
>> > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl93Wc4ACgkQh48B+qjT
>> > VuFisw//WCUwQEK4/yaguX948uGShjASOIf2N+umS+68tQRbrefNVpoTk3E1btvH
>> > kfZfx9JwZNAxu0W+9d4edcP/CY0cQ/Fl9kyIwCMokaZ+T6Uf74WKs+fT3klhKEY2
>> > HFj/xP5VgeCr1BecP709qutJMJ37RHre2iZRGOdALn+gV3T+A9rT8XVx8dMCqQ7Z
>> > EjETgvZVpuaVbl4evCbUdsX5fjICVH0VhkFNcKGj0F8fQ5mIubVds/NpF2n0+ie0
>> > blkUOqhRRniYcFPoaQKm8IrCRCKcwW5o67pthFaejJOz5wMrEJP0vIeVzY0bLHZL
>> > gzHWOU1wF++NB3WeA4+a7j6RjxDuLFTvABjlStRhs3mAlan93alFxdCYl7RWI6SX
>> > HtsVd0lW8Ug54zSVi+zCQbcg3AVFpZxpvL5URk+p40L03aPWh8JNbghffpo/j167
>> > EKp81PEcSYXtMhjdNXbVHP1NKZmsFJgSKcx3TLuoaOVDuCgOSw+tg3tQjOcOiqak
>> > 0AZRamhZartVZ22BRuToAEQpP4c0iqC6Qq/2ZwSsKi77AYW7Vppdo/NExm2cFfIs
>> > RlA8xoefyxif/OskR+MpOZZHttNi5a9MRbcTUmkp5xsEijHZOJjUIVv5cAkOQKNo
>> > lfO006p8maAu09tkkEYUyVq0P5KQ0kgWNp0u3JsJdxzHlSVqxmk=
>> > =Hoxj
>> > -----END PGP SIGNATURE-----
>> >
>> > ========================================================================
>> >
>> >      CHANGELOG for 9.1.0:
>> >
>> > ** Bug
>> >
>> >      * [WICKET-6702] - AsynchronousPageStore with
>> > NotDetachedModelChecker - "Not detached model found" exception on
>> > several fast sequential Ajax calls
>> >      * [WICKET-6802] - FilePageStore writing to
>> > UserDefinedFileAttributeView might be null
>> >      * [WICKET-6803] -  wicket-objectsizeof-agent has no valid automatic
>> > module name
>> >      * [WICKET-6806] - CSP header response decorator breaks
>> > JavaScriptFilteredIntoFooterHeaderResponse
>> >      * [WICKET-6808] - Cannot add page to AjaxRequestTarget
>> >      * [WICKET-6810] - Asynchronous+encrypted pagestore leads to
>> > WicketRuntimeException
>> >      * [WICKET-6813] - Setting child-src does not update frame-src after
>> > initial assignment
>> >      * [WICKET-6818] - NPE in WicketEndpoint onClose
>> >      * [WICKET-6822] - AsynchronousPageStore Potential Memory Leak
>> >      * [WICKET-6825] - wicket-ioc 9.0.0 throws IAE with JDK14, still
>> > includes outdated ASM 7.1.0 in cglib-nodep
>> >      * [WICKET-6837] - Jupiter engine transitively included in war file
>> >
>> > ** New Feature
>> >
>> >      * [WICKET-6805] - Add Cross-Origin Opener Policy and Cross-Origin
>> > Embedder Policy support
>> >
>> > ** Improvement
>> >
>> >      * [WICKET-6786] - CsrfPreventionRequestCycleListener should support
>> > Fetch Metadata Request Headers
>> >      * [WICKET-6807] - Fake Submitting Button
>> >      * [WICKET-6821] - Completely disable CSP support
>> >      * [WICKET-6824] - Use concatenation instead of String.format for
>> > frequently called methods
>> >      * [WICKET-6826] - Improve performance and reduce allocations for
>> > Behaviors
>> >      * [WICKET-6827] - Improve performance of Strings.join and
>> > Strings.replaceAll
>> >      * [WICKET-6828] - Wrong tree branch icon with hidden children
>> >      * [WICKET-6829] - Use String.isEmpty() instead of "".equals(...)
>> >      * [WICKET-6830] - Convert Behaviors into a static utility class to
>> > reduce allocations
>> >      * [WICKET-6831] - Try to flush the response before detach
>> >      * [WICKET-6833] - Reduce allocations when merging page parameters
>> >      * [WICKET-6835] - Improve performance of
>> AbstractMapper.getPlaceholder
>> >      * [WICKET-6838] - Improve performance of Strings.split
>> >
>> >
>>
>> --
>> Best regards,
>> Maxim
>>
>

-- 
Andrea Del Bene.
Apache Wicket committer.

Reply via email to