[jira] [Commented] (WICKET-6832) CSP support in Java 8
[
https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17321974#comment-17321974
]
Andrea Del Bene commented on WICKET-6832:
-
{quote}Hi,
perhaps another unexpected perspecitive: Please do NOT backport CSP to Wicket
8. Its the perfect trigger for me for getting a more modern stack. Some
departments are complaining about missing CSP, they are my best friends now: "I
can activate CSP in Wicket 9 but this requires Java 11"
{quote}
That's a fantastic argument in favor of migrating to Java 11 :D
> CSP support in Java 8
> -
>
> Key: WICKET-6832
> URL: https://issues.apache.org/jira/browse/WICKET-6832
> Project: Wicket
> Issue Type: New Feature
> Components: wicket
>Affects Versions: 9.0.0, 8.9.0
>Reporter: Ashley Reed
>Priority: Major
>
> Wicket needs Content-Security-Policy support in Java 8 as it is it the most
> popular version of Java used in production. Wicket 9 has CSP support, but
> requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to
> either add Java 8 support to Wicket 9 or add CSP support to Wicket 8.
>
> Evidence that Java 8 is still very popular:
> [https://blog.newrelic.com/technology/state-of-java/]
> [https://www.jrebel.com/blog/2020-java-technology-report]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17321100#comment-17321100 ] Hans Schäfer commented on WICKET-6832: -- Hi, perhaps another unexpected perspecitive: Please do NOT backport CSP to Wicket 8. Its the perfect trigger for me for getting a more modern stack. Some departments are complaining about missing CSP, they are my best friends now: "I can activate CSP in Wicket 9 but this requires Java 11" ;) Kind regards Hans > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17221789#comment-17221789 ] Sven Meier commented on WICKET-6832: For the interested I've down a downgrade for Wicket 9 to Java 8 here: https://github.com/apache/wicket/compare/master...svenmeier:wicket-9-java-8 > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17216697#comment-17216697 ] Emond Papegaaij commented on WICKET-6832: - I totally agree with Martin, Sven and Andrea here. The fact that JDK 8 still has support (read gets bug and security fixes), does not mean that a framework like Wicket needs to put effort in supporting new features on this old JDK. Wicket 8 probably will be supported (read gets bug and security fixes) for several years to come. For new features, you will have to upgrade your entire stack not just Wicket. The Wicket team has limited resources and we cannot afford to spend it on supporting many different platforms. There is nothing stopping you from forking the Wicket source code and either backport the features you need from Wicket 9 to Wicket 8 or downgrade the Java version in Wicket 9 though. > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17215894#comment-17215894 ] Andrea Del Bene commented on WICKET-6832: - Hi, CSP support required a huge effort in terms of both design and implementation. As many others have already said, porting this feature back to Wicket/Java 8 would require another notable effort, which would probably end up with a sub-optimal solution. I don't think it's possible to commit the core team to such effort as our main focus is to keep Wicket up to date with new technologies and with Java evolution. That said, we might consider to help other independent development teams if they decide to work on this back-port activity on their own, but this would be a project outside the Apache Software Foundation. > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17214499#comment-17214499 ] Martin Tzvetanov Grigorov commented on WICKET-6832: --- I also would prefer Wicket to evolve and use newer Java versions. Big corps make money and can support their products for as long as they have revenues from them. RedHat does not backport new features to JDK 8.x but just fix bugs. The improvements are mostly related to security related functionalities. > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17214360#comment-17214360 ] Maxim Solodovnik commented on WICKET-6832: -- I'm afraid this will be step back for Wicket 9 all performance optimizations will not work anymore it should be some new intermediate version (like Tomcat 8.5) > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17214253#comment-17214253 ] Ashley Reed commented on WICKET-6832: - Sven, adding Java 8 support to Wicket 9 seems perfectly reasonable to me. Thanks. > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17214218#comment-17214218 ] Sven Meier commented on WICKET-6832: Sorry guys, but the changes in WICKET-6703 can not be applied to Wicket 8.x, due to breaking API changes. And I doubt Wicket 8.x will be supported until 2026 :P. IMHO it would be easier to make Wicket 9.x compatible with Java 8. Switched in the pom here and got a bunch of these only: * '<>' cannot be used with anonymous classes * The method isBlank() is undefined for the type String * The method toSeconds() from the type Duration is not visible * The operator > is undefined for the argument type(s) BigDecimal * The method canAccess(Object) is undefined for the type Field > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17214003#comment-17214003 ] Jeffrey B Otterson commented on WICKET-6832: +1. RedHat is supporting Java 8 until May 2026. [https://access.redhat.com/articles/1299013#OpenJDK_Life_Cycle] Jeff > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17201747#comment-17201747 ] Ashley Reed commented on WICKET-6832: - (Un)fortunately, they're supporting it until 2030. [https://www.infoworld.com/article/3532358/oracle-extends-extended-support-for-java-8.html] [https://www.oracle.com/java/technologies/java-se-support-roadmap.html] > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (WICKET-6832) CSP support in Java 8
[ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17201740#comment-17201740 ] Sven Meier commented on WICKET-6832: That won't be so easy since we changed a lot of details of HeaderItem. Java 8 will be supported another year only: https://jaxenter.com/end-life-comes-early-jdk-8-140824.html > CSP support in Java 8 > - > > Key: WICKET-6832 > URL: https://issues.apache.org/jira/browse/WICKET-6832 > Project: Wicket > Issue Type: New Feature > Components: wicket >Affects Versions: 9.0.0, 8.9.0 >Reporter: Ashley Reed >Priority: Major > > Wicket needs Content-Security-Policy support in Java 8 as it is it the most > popular version of Java used in production. Wicket 9 has CSP support, but > requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to > either add Java 8 support to Wicket 9 or add CSP support to Wicket 8. > > Evidence that Java 8 is still very popular: > [https://blog.newrelic.com/technology/state-of-java/] > [https://www.jrebel.com/blog/2020-java-technology-report] -- This message was sent by Atlassian Jira (v8.3.4#803005)
