[ANNOUNCEMENT] Tapestry 5.8.6 released

2024-04-16 Thread Thiago H. de Paula Figueiredo
Hello, community! Another month, another bugfix release which should fix exceptions when running in production mode. Release notes at https://tapestry.apache.org/release-notes-586.html. Happy coding! -- Thiago H. de Paula Figueiredo

[WARNING] Don't use Tapestry 5.8.5 in production

2024-04-09 Thread Thiago H. de Paula Figueiredo
! On Mon, Apr 1, 2024 at 7:07 PM Thiago H. de Paula Figueiredo wrote: > > Hello, Tapestry community! > > Apache Tapestry 5.8.5 has just been. It's got 2 bugfixes and it's a > drop-in replacement and recommended upgrade for Tapestry 5.7.0+ plus > projects. > >

[ANNOUNCEMENT] Tapestry 5.8.5 released

2024-04-01 Thread Thiago H. de Paula Figueiredo
Hello, Tapestry community! Apache Tapestry 5.8.5 has just been. It's got 2 bugfixes and it's a drop-in replacement and recommended upgrade for Tapestry 5.7.0+ plus projects. Release notes at https://tapestry.apache.org/release-notes-581.html . Happy coding! Cheers! -- Thiago H. de Paula

Re: [ANNOUNCEMENT] Tapestry 5.8.4 release

2024-02-14 Thread Thiago H. de Paula Figueiredo
ance costs. Thoughts? Volker Lamp already tried that approach, but it reached a few dead ends since it's not just a package name change, but some Servlet API changes too. The Tapestry team should announce the project's planned roadmap, including the Jakarta EE issue, in the upcoming weeks. Stay

Re: [ANNOUNCEMENT] Tapestry 5.8.4 release

2024-02-13 Thread Thiago H. de Paula Figueiredo
eed our main priority now is to provide a Tapestry version using the jakarta.* packages and Servlet API 6. Cheers! -- Thiago H. de Paula Figueiredo - To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional co

[ANNOUNCEMENT] Tapestry 5.8.4 release

2024-02-06 Thread Thiago H. de Paula Figueiredo
support and the upgrade to the latest Underscore.js version. Full release notes at https://tapestry.apache.org/release-notes-584.html. Cheers! -- Thiago H. de Paula Figueiredo - To unsubscribe, e-mail: users-unsubscr

Re: Reason for PlasticClassLoader Problems

2024-01-18 Thread Thiago H. de Paula Figueiredo
ribe, e-mail: users-unsubscr...@tapestry.apache.org > For additional commands, e-mail: users-h...@tapestry.apache.org > -- Thiago H. de Paula Figueiredo - To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional commands, e-mail: users-h...@tapestry.apache.org

Re: Help request with LCR and IntelliJ

2023-10-30 Thread Thiago H. de Paula Figueiredo
On Thu, Oct 26, 2023 at 1:50 PM Riccardo De Menna wrote: > Hi everyone, Hi! Welcome to the Tapestry community! There's a fundamental difference in how Eclipse and IntelliJ idea work regarding how they build Java code which affects the Tapestry live class reloading experience. Every time you

Re: Anyone still using Java 8 in Tapestry webapps

2023-10-05 Thread Thiago H. de Paula Figueiredo
Thank you all for your feedback! It's very important to us. We have no plans of dropping support for Java 8 in Tapestry. On Tue, Oct 3, 2023 at 2:34 PM Thiago H. de Paula Figueiredo wrote: > > Hello, everyone! > > While planning the next Tapestry steps, one piece of information

Anyone still using Java 8 in Tapestry webapps

2023-10-03 Thread Thiago H. de Paula Figueiredo
Hello, everyone! While planning the next Tapestry steps, one piece of information that would be useful is whether there's still Tapestry webapps out there running on Java 8. No need to tell what the webapps are, just raise your virtual hand if the answer is yes. Thanks in advance. Cheers! --

[ANNOUNCEMENT] Tapestry 5.8.3 released

2023-07-16 Thread Thiago H. de Paula Figueiredo
Hello, Tapestry community! Tapestry 5.8.3, after a long year, has finally been released, and it has a long list of release notes! :) It should very soon be accessible at https://tapestry.apache.org/release-notes-582.html, but here's a text version of its highlights (which don't include all

Re: Avoiding page loading

2023-07-12 Thread Thiago H. de Paula Figueiredo
} > > return pageName -> pageNames.contains(pageName.toLowerCase()) ? > this : null; > } > } > > configuration.add("StrongPages", ReferenceType.STRONG.forPages("VeryLarge", > "AndTheOtherLargePage")); > > Cheers > Ben > > On Sun, J

Re: Problem running Tapestry 5.8.2 with Hibernate 5.4.32.Final

2023-06-27 Thread Thiago H. de Paula Figueiredo
Hello, everyone! While I believe we should fix this problem in the Tapestry's proxy creator code, since it may have been happening in non-Hibernate stuff as well, maybe we could have an interim fix of not using PropertyShadowBuider to build the Session service? Code is in

Re: Avoiding page loading

2023-06-17 Thread Thiago H. de Paula Figueiredo
ut I believe it's a bit orthogonal to what I did, both being able to coexist. On Thu, Jan 5, 2023 at 10:23 AM Thiago H. de Paula Figueiredo wrote: > > Hello, everyone! > > I prefer Ben's idea of a thread or cron job to keep it fresh other > than overriding a service, especial

Re: Problem running Tapestry 5.8.2 with Hibernate 5.4.32.Final

2023-06-15 Thread Thiago H. de Paula Figueiredo
Hello, everyone! On Sun, Jun 11, 2023 at 2:04 PM Vangel V. Ajanovski wrote: > This bug prompts another question that bothers me. > > How come nobody else has noticed the bug for two years? I had a report > in Sep 2021, which did not get an answer, there is another mention on > Stack Overflow in

Re: Avoiding page loading

2023-01-05 Thread Thiago H. de Paula Figueiredo
Hello, everyone! I prefer Ben's idea of a thread or cron job to keep it fresh other than overriding a service, especially now that I'm working on something (smarter page invalidation, which is actually smarter invalidation of some key Tapestry caches) which changes that PageSourceImpl a bit and

Re: Variable translator for money

2022-08-09 Thread Thiago H. de Paula Figueiredo
Hello! I'd try @Inject'ing FieldTranslatorSource and use its FieldTranslator createTranslator(ComponentResources componentResources, String translatorName) method. The type of the validate parameter of TextField and any other AbstractTextField subclass isn't Translator, but FieldTranslator.

Re: JumpStart is up

2022-07-12 Thread Thiago H. de Paula Figueiredo
Great news! Thanks so much, Geoff! JumpStart is an invaluable resource for Tapestry users. On Sun, Jul 10, 2022 at 9:00 PM JumpStart wrote: > > JumpStart is up! Its new home is https://tapestry-jumpstart.org/jumpstart > . Yesterday it had the wrong >

[CVE-2022-31781] Apache Tapestry denial of service vulnerability

2022-07-12 Thread Thiago H. de Paula Figueiredo
Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022) (CVE-2022-31781) PRODUCT AFFECTED: This issue affects Apache Tapestry 5.8.1. PROBLEM: Severity: low Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it

[ANNOUNCEMENT] Tapestry 5.8.2 released

2022-06-20 Thread Thiago H. de Paula Figueiredo
Hello, community! Tapestry 5.8.2 has just been released. A drop-in replacement and recommended upgrade for projects using 5.7.0+. Besides the usual small fixes and enhancements, 5.8.2 introduces CORS (Cross-Origin Resource Sharing) support. The goal was to cover as many scenarios as possible by

Re: [ANNOUNCEMENT] Tapestry 5.8.1 released!

2022-04-05 Thread Thiago H. de Paula Figueiredo
h tapestry version is running :( > > __ __ > /_ __/__ ___ ___ / /___ __ / __/ > / / / _ `/ _ \/ -_|_- /_/ \_,_/ .__/\__/___/\__/_/ \_, / // > /_/ /___/ UNKNOWN (development mode) > > Cheers > >

[ANNOUNCEMENT] Tapestry 5.8.1 released!

2022-04-04 Thread Thiago H. de Paula Figueiredo
Hello, Tapestry community! We've just released Tapestry 5.8.1. It's mostly about getting Tapestry-IoC to support all Java language features introduced between Java 9 and 17. It also includes some other bug fixes and small improvements. Tapestry 5.8.1 is a drop-in replacement and recommended

Re: Navigation to section of a page

2022-03-25 Thread Thiago H. de Paula Figueiredo
Nice! Thanks for sharing! On Thu, Mar 24, 2022 at 10:56 PM Christopher Dodunski (Tapestry) < chrisfromtapes...@christopher.net.nz> wrote: > Hi Ben and Thiago, > > Thank you for your well considered suggestions on accommodating anchor > points in returned pages. I've stored them away for

Re: Navigation to section of a page

2022-03-22 Thread Thiago H. de Paula Figueiredo
On Mon, Mar 21, 2022 at 4:24 AM Ben Weidig wrote: > Hi Chris, > Hello, Chris and Ben! >- Allow an anchor at the end of the String, and set it >PageNameComponentEventResultProcessor > You mean overriding the contribution to the ComponentEventResultProcessor for the String.class key

Re: Navigation to section of a page

2022-03-22 Thread Thiago H. de Paula Figueiredo
On Mon, Mar 21, 2022 at 1:34 AM Christopher Dodunski (Tapestry) < chrisfromtapes...@christopher.net.nz> wrote: > Hi, > Hi! > Quick question: Tapestry is flexible when it comes to return types for > page navigation. "When a string is returned, it is expected to be the > logical name of a

Re: Tapestry default style sheet change doesn't seem to kick in

2022-03-06 Thread Thiago H. de Paula Figueiredo
On Tue, Feb 15, 2022 at 4:13 PM Feng Gao wrote: > Hello! > Hello! > I followed instructions on https://tapestry.apache.org/css.html to change > Tapestry (v5.7.3) default stylesheet to use Bootstrap-4.6.1 stylesheet, > instead of the default Bootstrap-4.3.1: > > Here's what I ended up with in

Re: Rendering a page without a .tml template?

2022-03-01 Thread Thiago H. de Paula Figueiredo
On Tue, Mar 1, 2022 at 1:44 AM Jonathan Meijer wrote: > Hi, > Hello! > In my tapestry app, in some cases, I want the HTML to be entirely generated > without Tapestry's intervention. > As Volker mentioned, your page should have an onActivate() method that returns a StreamResponse (maybe a

Re: quickstart navbar toggler not working

2022-02-10 Thread Thiago H. de Paula Figueiredo
e map: Could not load content for > +http://localhost:8080/modules.gz/bootstrap/util.js.map+: > <http://localhost:8080/modules.gz/bootstrap/util.js.map+:> HTTP error: > status code 404, net::ERR_HTTP_RESPONSE_CODE_FAILURE > > > Tim > > On 9/2/22 23:18, Thiago H. de

Re: quickstart navbar toggler not working

2022-02-09 Thread Thiago H. de Paula Figueiredo
Hi! This is most probably caused by the lack of inclusion of the JavaScript module that implements the Bootstrap 4 behaviors. Jira ticket please? :) Meanwhile, you can try adding @Include(module = "bootstrap") to your Layout class. I haven't tested this and it might not work. Cheers! On Mon,

Re: Re: quickstart pom.xml - update maven-war-plugin to 3.3.1

2022-02-07 Thread Thiago H. de Paula Figueiredo
l - update maven-war-plugin to 3.3.1 > Datum: 03.02.2022 13:23 > Von: "Thiago H. de Paula Figueiredo" > An: Tapestry users > Antwort an: "Tapestry users" > > Hello! > > Thanks for spotting that and proposing a solution! > > Could you please create a J

Re: Newest Tapestry version for Java 8

2022-02-04 Thread Thiago H. de Paula Figueiredo
Hello, Bob! Tapestry 5.8 should work with Java 8. It's compiled with that version as both target and source. I do know a large webapp which runs on Java 8 and Tapestry 5.7.3 (which is basically the same as 5.8.0 besides the later version having a few new features and bug fixes). On Fri, Feb 4,

Re: quickstart pom.xml - update maven-war-plugin to 3.3.1

2022-02-03 Thread Thiago H. de Paula Figueiredo
Hello! Thanks for spotting that and proposing a solution! Could you please create a Jira ticket in the Tapestry issue tracker and post it here? I should be able to implement your solution soon. Cheers! On Wed, Feb 2, 2022 at 9:05 AM wrote: > Hi, > > I'v just tried the quickstart application

Re: [RELEASE] Tapestry 5.8.0 released

2022-01-31 Thread Thiago H. de Paula Figueiredo
ways, all feedback is welcome! > > Many thanks to all!!! > > Charles > > On 1/26/22 9:38 AM, Thiago H. de Paula Figueiredo wrote: > > Hello, Tapestry community! > > > > Tapestry 5.8.0 has just been released. It's focused on a couple of new > > feature

Re: t:grid coercing value when it shouldn't

2022-01-31 Thread Thiago H. de Paula Figueiredo
s > completely different paradigm. > Interesting! As far as I remember, WebObjects was an inspiration for Tapestry in the beginning. > > Jonathan > > On Thu, Jan 27, 2022, 16:26 Thiago H. de Paula Figueiredo < > thiag...@gmail.com> wrote: > > > On Fri, Jan 21,

Re: [RELEASE] Tapestry 5.8.0 released

2022-01-27 Thread Thiago H. de Paula Figueiredo
On Wed, Jan 26, 2022 at 7:24 PM Volker Lamp wrote: > Hello Thiago & other contributors, > Hello! Thank you very much for new release. The Rest API feature is a very useful > addition. Our pleasure! We're looking for your feedback on REST support! As much as we try to architect it to be easy

Re: Apache FOP integration

2022-01-27 Thread Thiago H. de Paula Figueiredo
On Thu, Jan 27, 2022 at 2:55 PM Jens Breitenstein wrote: > The only interaction with Tapestry is the StreamResponse from an > EventHandler to the client. Friendly reminder you can return StreamResponse from a page's onActivate() method too. -- Thiago

Re: t:grid coercing value when it shouldn't

2022-01-27 Thread Thiago H. de Paula Figueiredo
On Fri, Jan 21, 2022 at 12:56 AM Jonathan Meijer wrote: > Hi, > Hi! > New Tapestry user here, started with a bootstrapped 5.7.3 and > experimenting. > Welcome to Tapestry! We just released 5.8.0, by the way. > Delete > I suggest using EventLink instead of ActionLink. Very similar, but

[RELEASE] Tapestry 5.8.0 released

2022-01-26 Thread Thiago H. de Paula Figueiredo
Hello, Tapestry community! Tapestry 5.8.0 has just been released. It's focused on a couple of new features: * Support for writing REST endpoints. Read more about this on its documentation page: https://tapestry.apache.org/rest-support-580.html. * Support for Servlet API 3.0+ asynchronous

Re: Deadlock on lazy services

2021-12-20 Thread Thiago H. de Paula Figueiredo
On Fri, Dec 17, 2021 at 10:48 AM Oliver Kaiser wrote: > On 12/14/2021 10:40 PM, Dimitris Zenios wrote: > > Hi all it seems there is a raise condition when realizing lazy loaded > > services. > Indeed it is. > if you want to do the same try marking your "service A" as eager load. > I was

Re: Best practice for health check URL?

2021-12-07 Thread Thiago H. de Paula Figueiredo
On Mon, Dec 6, 2021 at 1:25 PM JumpStart < geoff.callender.jumpst...@gmail.com> wrote: > I think you’d want to make it a configuration option, so that development > can still come up quickly, but that sounds great for production. > Yes, my mental plan is to have it configurable, probably on by

Re: Best practice for health check URL?

2021-12-03 Thread Thiago H. de Paula Figueiredo
Hi! Today I started wondering about how we could get Tapestry to run under Quarkus.io, including generating a native executable. Of course, this won't include bytecode generated in runtime, something many libraries and frameworks do, Tapestry very much included. Then I researched a bit and found

Re: Variable translate in TextField

2021-11-03 Thread Thiago H. de Paula Figueiredo
On Tue, Nov 2, 2021 at 12:55 AM JumpStart < geoff.callender.jumpst...@gmail.com> wrote: > Hi all, > Hello! I'd try using one of the methods of FieldTranslatorSource, starting with createTranslator(ComponentResources componentResources, String translatorName);. It's exactly the one used by the

Re: Trigger event to outer component

2021-10-29 Thread Thiago H. de Paula Figueiredo
Op 28/10/2021 om 15:44 schreef Thiago H. de Paula Figueiredo: > > Hello! > > > > Events do bubble up in the component hierarchy/tree until they're > handled, > > so the situation is a bit weird. Have you checked whether there's some > > other component in bet

Re: Getting Started with 5.7.2

2021-10-29 Thread Thiago H. de Paula Figueiredo
escribió: > > > Hello, > > > > Just to say that I will start to work on updating quickstat to make > spring > > boot optional. Give me some days, I will come with a patch. > > > > Regards, > > > > El mar, 10 ago 2021 a las 23:36, Thiago H. de Paula

Re: Trigger event to outer component

2021-10-28 Thread Thiago H. de Paula Figueiredo
Hello! Events do bubble up in the component hierarchy/tree until they're handled, so the situation is a bit weird. Have you checked whether there's some other component in between which is catching this event and thereby avoiding Layout from receiving it? On Wed, Oct 27, 2021 at 3:38 PM Nathan

Re: Java 17 Support

2021-10-19 Thread Thiago H. de Paula Figueiredo
On Mon, Oct 18, 2021 at 9:11 AM Bosch, Christian wrote: > Hello, > Hello! > Is it plan to support java 17 ? > What exactly do you mean by that? If that's about bytecode, Tapestry supports what the ASM library (https://asm.ow2.io) does. Right now, Tapestry uses ASM 8.0.1, which supports Java

Re: Rendering a tapestry component to a string

2021-10-14 Thread Thiago H. de Paula Figueiredo
On Mon, Oct 11, 2021 at 12:47 PM Adriaan Joubert wrote: > Hi, > Hello, Adriaan! > We are starting to use a library called fancytree ( > http://wwwendt.de/tech/fancytree/demo/index.html). For basic trees this > integrates really easily with tapestry. > > However for tree tables the simplest

Re: Getting Started with 5.7.2

2021-09-02 Thread Thiago H. de Paula Figueiredo
ckstart. > > > > > > Give a look and a test, if something should be changed leave a comment > > and > > > I will do the change. > > > > > > Regards, > > > > > > El vie, 27 ago 2021 a las 7:52, pico.dev () > > escribió: >

Re: Render a single Enum value

2021-08-30 Thread Thiago H. de Paula Figueiredo
Hello! Have you tried ? This component is used by BeanDisplay and Grid for outputting property values, using the contributed display blocks to the BeanBlockSource, and uses TapestryInternalUtils.getLabelForEnum(Messages, Enum). On Wed, Aug 25, 2021 at 11:31 PM Paul Stanton wrote: > Using

Re: [RELEASE] Apache Tapestry 5.7.3 released

2021-08-30 Thread Thiago H. de Paula Figueiredo
Hello! I'm sorry for the very late answer. On Mon, Aug 16, 2021 at 11:29 AM Vangel V. Ajanovski wrote: > I'm experiencing some issue where session.createQuery always returns a > null in the constructor of a SessionState object, after moving to 5.7.3. > Otherwise everything works and is a

Re: [RELEASE] Apache Tapestry 5.7.3 released

2021-08-16 Thread Thiago H. de Paula Figueiredo
I forgot to mention you can see the 5.7.3 release notes at https://cwiki.apache.org/confluence/display/TAPESTRY/Release+Notes+5.7.3 until the main site is updated. On Mon, Aug 16, 2021 at 9:45 AM Thiago H. de Paula Figueiredo < thiag...@gmail.com> wrote: > Hello, community! > >

[RELEASE] Apache Tapestry 5.7.3 released

2021-08-16 Thread Thiago H. de Paula Figueiredo
Hello, community! Tapestry 5.7.3 has just been released. It's a new release focused on some improvements and new features. Main ones are: - Upgrading Hibernate's version from 5.1.1.Final to 5.4.32.Final. This required some changes in tapestry-hibernate due to some

Re: Getting Started with 5.7.2

2021-08-10 Thread Thiago H. de Paula Figueiredo
red in the app generated by quickstart, I could > > try to provide a new patch to remove it if you wish, I hope as soon as I > > can, just confirm me and I start doing the changes. > > > > Regards, > > > > El vie, 30 abr 2021 a las 22:43, Thiago H. de Paula Fig

Re: Integrating Agrest in Tapestry app

2021-08-05 Thread Thiago H. de Paula Figueiredo
Ouch, I should have checked Ben's brilliant response before I wrote my own, inferior one. On Thu, Aug 5, 2021 at 1:12 PM Thiago H. de Paula Figueiredo < thiag...@gmail.com> wrote: > On Tue, Aug 3, 2021 at 8:12 AM D Tim Cummings > wrote: > >> I had a look at tapestry-

Re: Integrating Agrest in Tapestry app

2021-08-05 Thread Thiago H. de Paula Figueiredo
On Tue, Aug 3, 2021 at 8:12 AM D Tim Cummings wrote: > I had a look at tapestry-resteasy but it seems to rely on hibernate or > jpa and I am using cayenne. tapestry-resteasy doesn't rely on either Hibernate or JPA nor any other ORM:

Re: JQuery and EasyUI problems of migrating Tapestry 5.3.8 to 5.5.0+

2021-07-27 Thread Thiago H. de Paula Figueiredo
Hello! I believe the problem here is that it seems your code is preventing Require.js from being loaded, thus causing the Uncaught TypeError: require is not a function error and completely breaking the whole Tapestry's own JavaScript. I'd try avoiding overriding/adding again the jQuery library,

Re: upgrade from 3.0.1

2021-07-27 Thread Thiago H. de Paula Figueiredo
Hello! I agree with Volker and Cezary. There would be no value to do any upgrade other than 5.7. I haven't worked with Tapestry 3, but I did with 4 (even a couple months ago) and I've been working daily with 5.7. Some of the main concepts do carry over these versions (pages, the 1-1 relationship

Re: Help overriding ComponentMessageSource service

2021-06-21 Thread Thiago H. de Paula Figueiredo
On Thu, Jun 17, 2021 at 8:29 AM Numa Schmeder wrote: > Hi, Hi! > Thanks for your help, no it doesn’t seem to work. I found a solution > using decorate method, but I am not sure it’s really clean. I consider decoration really clean. Sometimes you cannot use service override because it

Re: method varargs and property expression

2021-06-07 Thread Thiago H. de Paula Figueiredo
; Thank you. > > Best regards, > > Numa > > > Le 6 juin 2021 à 21:09, Thiago H. de Paula Figueiredo < > thiag...@gmail.com> a écrit : > > > > On Wed, May 26, 2021 at 7:00 AM Numa Schmeder n...@dfacto.ch>> wrote: > > > >> Hello, > >&

Re: AssetDispatcher Tapestry 5.3.8

2021-06-06 Thread Thiago H. de Paula Figueiredo
On Fri, May 28, 2021 at 9:41 AM Reinhold Gruber wrote: > Hi! > Hello! > > Some emergency. Any help highly appreciated. > The AssetDispatcher in Tapestry 5.3.8 allows harmful requests, reading > contents from WEB-INF etc. > We currently do not have the time to update to the newest Tapestry

Re: method varargs and property expression

2021-06-06 Thread Thiago H. de Paula Figueiredo
On Wed, May 26, 2021 at 7:00 AM Numa Schmeder wrote: > Hello, > Hello! > It seems method with varargs doesn’t work with property expression. > If I put the following property expression, I get an error: Message > doesn’t have a public “format" method. > ${messages.format('priceFromPerGuest',

Re: Tapestry 5.7+ and Spock

2021-05-25 Thread Thiago H. de Paula Figueiredo
Hello, Volker and other Tapestry users! Thanks for the patch! Much appreciated! I'll try to take a look at it this weekend. Cheers! On Sat, May 22, 2021 at 5:30 PM Volker Lamp wrote: > Just a quick email with some status information. The Spock project > encouraged Tapestry should adopt

Re: Tapestry 5.7+ and Spock

2021-04-30 Thread Thiago H. de Paula Figueiredo
Thanks, Volker! I've just thumbed-up it! On Wed, Apr 28, 2021 at 5:59 PM Volker Lamp wrote: > If you, like me, use Spock (and perhaps Geb) specification/tests for your > Tapestry apps, please support my initiative to have Spock, or > spock-tapestry, to be precise, support Tapestry 5.7+.

Re: Getting Started with 5.7.2

2021-04-30 Thread Thiago H. de Paula Figueiredo
Hello! Thank you very much for spotting and warning us about these issues. You shouldn't need to use Spring Boot. The archetype needs to be fixed. On Sat, Apr 24, 2021 at 9:00 PM D Tim Cummings wrote: > I have tried the instructions at > https://tapestry.apache.org/getting-started.html using

CVE-2021-30638: An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later

2021-04-27 Thread Thiago H. de Paula Figueiredo
Description: Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry

Re: Coffeescript documentation is broken

2021-04-21 Thread Thiago H. de Paula Figueiredo
ly "hides" the index page with the links to the > apidocs and coffeescript pages. > > Also the contents of the "jump to" (upper right corner) menu on > http://tapestry.apache.org/5.7.0/coffeescript/t5-core-dom-jquery.html are > still broken. > > -- > Chris > &g

[SECURITY VULNERABILITY DISCLOSURE] CVE-2021-27850: Apache Tapestry: Bypass of the fix for CVE-2019-0195

2021-04-14 Thread Thiago H. de Paula Figueiredo
Description: A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Before the fix of

[ANNOUNCEMENT] Tapestry 5.7.2 released

2021-04-14 Thread Thiago H. de Paula Figueiredo
Tapestry 5.7.2 is a drop-in replacement and recommended upgrade for previous 5.7.2 releases. To upgrade, just update the dependency in your build configuration (Maven POM, Gradle build script, etc.) – or Download the new JAR file -- and the new version will just work. However, please review the

[ANNOUNCEMENT] Tapestry 5.6.4 released

2021-04-14 Thread Thiago H. de Paula Figueiredo
Tapestry 5.6.5 is a drop-in replacement for Tapestry 5.4, 5.5 and 5.6 releases. It's a recommended upgrade for 5.4+ until 5.6.x. To upgrade, just update the dependency in your build configuration (Maven POM, Gradle build script, etc.) – or Download the new JAR file -- and the new version will just

Re: Coffeescript documentation is broken

2021-04-14 Thread Thiago H. de Paula Figueiredo
Hello! Please check again and let me know whether the problems are actually fixed. On Thu, Mar 25, 2021 at 7:52 AM Chris Poulsen wrote: > Hi > > I was just introducing a new employee to Tapestry and when I wanted to walk > through the coffeescript docs since I find them a little peculiar, I >

Re: GridPager Component with Boostrap4

2021-04-13 Thread Thiago H. de Paula Figueiredo
On Thu, Apr 8, 2021 at 1:12 PM Georg Ragaller wrote: > Hello all, > Hello, Georg! > I am just starting with Tapestry (5.7.1) and use the grid component. > Welcome to the Tapestry community! > Also, the application module is annotated with > @ImportModule(Bootstrap4Module.class), as I want

Re: [ANNOUNCEMENT] Tapestry 5.6.2 released

2021-04-13 Thread Thiago H. de Paula Figueiredo
en go here: https://cwiki.apache.org/confluence/display/TAPESTRY/Home. From there, you can click on links or use search to find specific pages. You should already have edition permissions. Cheers! > > Ben > > > On Wed, Apr 7, 2021 at 11:43 PM Thiago H. de Paula Figueiredo < >

Re: [ANNOUNCEMENT] Tapestry 5.6.2 released

2021-04-07 Thread Thiago H. de Paula Figueiredo
y compatibility broken. I'm sorry for that. > > Such libraries will need to be recompiled using 5.6.2+ > > Release notes for 5.6.2 miss this detail. > > On Wed, Feb 24, 2021 at 3:01 PM Thiago H. de Paula Figueiredo < > thiag...@gmail.com> wrote: > > > Tapestry 5.6.2 is a drop-in repla

Re: [ANNOUNCEMENT] Tapestry 5.7.1 and 5.6.3 released

2021-03-22 Thread Thiago H. de Paula Figueiredo
Løken (< > > > svein.erik.lo...@brav.com>) escribió: > > > > > >> Thank you! I using Tapestry in production with 1,5 million unique > users > > >> every year. It handles very high load  > > >> > > >> S-E > > >> &

[ANNOUNCEMENT] Tapestry 5.7.1 and 5.6.3 released

2021-03-16 Thread Thiago H. de Paula Figueiredo
Hello! Both are recommended upgrades: 5.6.3 for 5.4 to 5.6.2, 5.7.1 for 5.7.0. Please check the release notes for both: 5.6.3: https://tapestry.apache.org/release-notes-563.html 5.7.1: https://tapestry.apache.org/release-notes-561.html Happy coding! -- Thiago

[ANNOUNCEMENT] Tapestry 5.7.0 released

2021-02-24 Thread Thiago H. de Paula Figueiredo
Tapestry 5.7.0 is a new major version which needs a migration step for projects using previous versions. To upgrade, update the dependency in your build configuration (Maven POM, Gradle build script, etc.) – or Download the new JAR file. Please check the Upgrade Guide section in the release notes

[ANNOUNCEMENT] Tapestry 5.6.2 released

2021-02-24 Thread Thiago H. de Paula Figueiredo
Tapestry 5.6.2 is a drop-in replacement for Tapestry 5.4, 5.5 and 5.6 releases. It's a recommended upgrade for 5.6.1 and 5.6.0. To upgrade, just update the dependency in your build configuration (Maven POM, Gradle build script, etc.) – or Download the new JAR file -- and the new version will just

Re: Ecmascript5 and tapestry-webresources

2021-02-14 Thread Thiago H. de Paula Figueiredo
if the options are thread-safe and could be > > reused, so contributing it as a symbol (as an alternative to a factory) > > might not be feasible. > > > > If I find some time this weekend I try to (finally) take a deeper look at > > it. > > > > Cheers, > >

Re: Ecmascript5 and tapestry-webresources

2021-01-28 Thread Thiago H. de Paula Figueiredo
Hello, Geoff! Looking at GoogleClosureMinimizer, I cannot see how the options can be customized. Could you please create a Jira issue so we can fix this in 5.7.0? Thanks in advance. Cheers! On Thu, Jan 28, 2021 at 6:31 AM JumpStart < geoff.callender.jumpst...@gmail.com> wrote: > Can I pass

CVE-2020-17531: Deserialization flaw in EOL Tapestry 4.

2020-12-08 Thread Thiago H. de Paula Figueiredo
Description: A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached end of life in 2008 and

Re: Fw: Communication between Tapestry and Angular(inside of an iframe)

2020-10-21 Thread Thiago H. de Paula Figueiredo
On Fri, Oct 9, 2020 at 7:55 AM Dmitry Gusev wrote: > Hi Hristo, > Hello, everyone! > > How could I possibly make an event listener inside Java? > Both options provided by Dmitry are good, but I'd prefer the Tapestry-only (i.e. not REST framework needed) one. If you're using Tapestry 5.4.2

Re: How to Show a Div using Javascript

2020-10-08 Thread Thiago H. de Paula Figueiredo
On Mon, Oct 5, 2020 at 9:28 AM marwa hussein wrote: > On Mon, Oct 5, 2020, 2:22 PM Thiago H. de Paula Figueiredo < > thiag...@gmail.com> wrote: > > > On Sun, Oct 4, 2020 at 8:37 AM marwa hussein > > wrote: > > > > > Hi Thiago, > > > >

Re: How to Show a Div using Javascript

2020-10-05 Thread Thiago H. de Paula Figueiredo
On Sun, Oct 4, 2020 at 8:37 AM marwa hussein wrote: > Hi Thiago, > Hello! > Thanks a lot for your reply it works fine but the problem is using this > line of code in beginRender() function shows the "div" when the page is > loaded. but What I want is to show the div after a button is pressed.

Re: Tapestry 5.5 beta and Java Modularity

2020-10-03 Thread Thiago H. de Paula Figueiredo
Hello, Charles! TAP5-2641 is taking care of fixing the split packages problem, plus setting automatic module names for all the Tapestry JARs ("org.apache.tapestry" + project name, except for tapestry5-annotations, which will be org.apache.tapestry-annotations'). Lots of classes needed to be moved

Re: Open Discussion: remove Bootstrap from T5 core

2020-10-03 Thread Thiago H. de Paula Figueiredo
Hello, everyone! I know this thread is a bit old already, but Tapestry 5.5.0 can be used without Bootstrap at all: https://tapestry.apache.org/release-notes-550.html , https://tapestry.apache.org/css.html, @ImportModule(NoBootstrapModule.class). In addition, there's a number of configuration

Re: How to Show a Div using Javascript

2020-10-03 Thread Thiago H. de Paula Figueiredo
Hello! @Inject private JavaScriptSuport javaScriptSupport; void beginRender() { javaScriptSupport.addScript("document.getElementById("div1").style.display = '';"); } On Sat, Oct 3, 2020 at 10:06 AM marwa hussein wrote: > Hello all, > I am new to Tapestry and to Web development in general but

[CVE-2020-13953] Apache Tapestry WEB-INF file download vulnerability

2020-09-26 Thread Thiago H. de Paula Figueiredo
CVE-2020-13953: Apache Tapestry: URL manipulation allows Java webapp files inside WEB-INF to be listed and downloaded. Vendor: The Apache Software Foundation Versions Affected: Tapestry 5.4.0 to 5.5.0 Description: Crafting specific URLs, an attacker can download files inside the WEB-INF folder.

Re: Tapestry services lifecycle

2020-09-19 Thread Thiago H. de Paula Figueiredo
On Tue, Sep 15, 2020 at 7:50 PM Christopher Dodunski (Tapestry) < chrisfromtapes...@christopher.net.nz> wrote: > Hi all, just a quick question... > Hello! > Once a Tapestry service implementation gets instantiated, and that > service's status moves to "realised", at what point does that >

[ANNOUNCEMENT] Apache Tapestry 5.6.1 released

2020-09-19 Thread Thiago H. de Paula Figueiredo
Hello! Tapestry 5.6.1 has been released. Only change is fixing that issue that caused asset requests to fail when your classpath doesn't have commons-lang. -- Thiago

Re: no CSS since 5.6.0

2020-09-19 Thread Thiago H. de Paula Figueiredo
Hello, Marcel! Tapestry 5.6.1 has been released and it fixes this issue without you having to add commons-lang yourself. On Fri, Sep 4, 2020 at 4:21 PM Marcel Schepers wrote: > > > This seems to be a dependency problem. What dependency management tool > > you use? Until we have a proper fix

Re: Re: Spring Security Integration

2020-09-11 Thread Thiago H. de Paula Figueiredo
org/integrating-with-spring-framework.html > > Regards > Reinhold > > > > > Gesendet: Freitag, 11. September 2020 um 01:11 Uhr > Von: "Thiago H. de Paula Figueiredo" > An: "Tapestry users" > Betreff: Re: Spring Security Integration > On Thu, Sep 10, 2

Re: Spring Security Integration

2020-09-10 Thread Thiago H. de Paula Figueiredo
On Thu, Sep 10, 2020 at 5:50 PM Reinhold Gruber wrote: > Hi! > Hi! I have a hard time trying to integrate Tapesty within a Spring Boot > Application secured by Spring Security. > Did anyone have success in this area and wants to share his experience and > knowhow. I thought that it would be

Re: no CSS since 5.6.0

2020-09-03 Thread Thiago H. de Paula Figueiredo
On Thu, Sep 3, 2020 at 7:32 AM Marcel Schepers wrote: > Hello, > Hello! Please try running your site in production with tapestry.production-mode=off to see whether the full stack trace is shown. Attachments are discarded by the ASF mailing list server, so we cannot see your screenshot. > >

[ANNOUNCEMENT] Tapestry 5.6.0 release

2020-09-01 Thread Thiago H. de Paula Figueiredo
Hello, Tapestry community! 5.6.0 has just been released. Highlights are support for Java 14 bytecode and better accessibility in forms with automatic generation of WAI-ARIA attributes, All the details are described here: https://tapestry.apache.org/release-notes-560.html. I highly recommend

Re: redirect after javascript ajax call

2020-08-28 Thread Thiago H. de Paula Figueiredo
On Fri, Aug 28, 2020 at 2:39 PM Marcel Schepers wrote: > Hello, > Hello! > I am having a bit of a hard time to figure out what the best Tapestry > way is to do the following. My application's main index page should > forward the user to another page. I am able to do so by implementing the >

Re: Making certain BeanEditForm fields 'read only'

2020-08-26 Thread Thiago H. de Paula Figueiredo
On Wed, Aug 26, 2020 at 7:27 AM Christopher Dodunski (Tapestry) < chrisfromtapes...@christopher.net.nz> wrote: > Thanks Thiago. > My pleasure to help! > I guess it's something worth considering in the future - updating > BeanEditor and related components to better leverage HTML5 features. >

Re: Making certain BeanEditForm fields 'read only'

2020-08-25 Thread Thiago H. de Paula Figueiredo
Hello! I don't think there's a way of doing that that doesn't require changing BeanEditor (which does the heavy lifting for BeanEditForm) and one at least one of PropertyModel and PropertyConduit. On Tue, Aug 18, 2020 at 6:19 AM Christopher Dodunski (Tapestry) <

Re: Deadlock in IOC (ConcurrentBarrier vs JustInTimeObjectCreator)

2020-08-17 Thread Thiago H. de Paula Figueiredo
On Mon, Aug 17, 2020 at 6:42 AM Oliver Kaiser wrote: > sure; that seems to fix it > Thank *you* for doing almost the whole work here: spotting the issue, creating a test case, suggesting the fix (which was exactly what you suggested) then confirming it. :) > > thank you, > Oliver > >

Re: Deadlock in IOC (ConcurrentBarrier vs JustInTimeObjectCreator)

2020-08-16 Thread Thiago H. de Paula Figueiredo
. de Paula Figueiredo < thiag...@gmail.com> wrote: > Hello! > > It's a very specific corner case. Please create a JIRA ticket and I'll try > to fix it. Thanks for posting and investigating! > > On Thu, Jul 30, 2020 at 1:44 PM Oliver Kaiser > wrote: > >> Hi

Re: Deadlock in IOC (ConcurrentBarrier vs JustInTimeObjectCreator)

2020-08-15 Thread Thiago H. de Paula Figueiredo
Hello! It's a very specific corner case. Please create a JIRA ticket and I'll try to fix it. Thanks for posting and investigating! On Thu, Jul 30, 2020 at 1:44 PM Oliver Kaiser wrote: > Hi everyone, > > > we recently found a strange deadlock problem; first seemed to be related > to switching

  1   2   3   4   5   6   7   8   9   10   >