[CVE-2020-11976] Apache Wicket information disclosure vulnerability

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 7.16.0, 8.8.0 and 9.0.0-M5 Description: By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information

Re: FormComponents and feedback messages inside a listview

http://cwiki.apache.org/WICKET/listview-and-other-repeaters.html#ListViewandotherrepeaters-Usingformcomponentsinarepeater Wim Vandenhaute wrote: Hello List, I have ran a couple of times whilst developing some pages using wicket into the following issue. The page will contain a Form,

Re: another serialization question

Then just keep the criteria to get those items in your components? samb0057 wrote: The value objects are not simple attributes of an entity. Let me explain what they do (a little simplified but the fundamentals are there). We have a research module that performs pricing research.

Re: correct way to call necessary javascript initialization when a component is added via ajax

Why so complicated? @Override public void renderHead(IHeaderResponse response) { response.renderOnDomReadyJavascript(init_slider_js()); } Peter Ross-6 wrote: On Wed, Nov 11, 2009 at 3:48 PM, Jeremy Thomerson jer...@wickettraining.com wrote: On Tue, Nov 10, 2009 at 10:38 PM, Peter

Re: Combination CompoundPropertyModel and ChoiceRenderer on DropDownChoice gives problems

You want to select one value from a list of values, so obviously everything has to have the same type. These 'IdDescrBeans' smell like Struts, such constructs are not needed. What's wrong with the following: ListString genders = new ArrayListString(); list.add(M); list.add(F);

RE: Wicket Wizard Functionality (Extensions)

See https://issues.apache.org/jira/browse/WICKET-2542 Corbin, James-2 wrote: Hi Sven, What exactly am I supposed to implement in the AjaxFormSubmittingBehavior.onSubmit(...)? I've tried everything I can think of and the popup still dismisses(closes) when I press the Next button after

Re: Tree-table css/layout problem when the label of the tree-node is long

Hi Zoltan, this is a known limitation of Wicket's tree implementation. Please take a look at http://code.google.com/p/wicket-tree/ for an alternative solution. Sven zoltan luspai wrote: Dear Wicketeers, I am using the wicket's standard tree-table widget, and it works fine; except

Re: Conversation scope in wicket

What is this 'conversation' all about? It doesn't seem to be a known concept in any GUI guideline I know (e.g. Apple's Human Interface Guidelines). Neither does wikipedia list it under http://en.wikipedia.org/wiki/GUI_widget. This is what wikipedia is saying about Seam's conversation: 'The

Re: Twenty Six Wicket Tricks

I'd like to review your Wicket tricks too. Regards Sven Jonathan Locke wrote: Thanks, I appreciate the offer to review. I will get back to you in some number of weeks. ;-) Yeah, the JavaOne talk I submitted is indeed on Wicket. Jon jWeekend wrote: Jonathan,

Re: Wicket Stuff devs - teamcity is open for registration

Time to do some cleaning up: username: svenmeier project: wicketstuff-prototype Thanks Sven Martijn Dashorst wrote: We have moved our build server to run on teamcity. Our previous software was not up to par. I have picked Teamcity because it was the quickest to setup securely at 1am

Re: WebPage markup error with latest trunk

Did somebody create a jira issue already? I'm experiencing the same log statement since upgrading to 1.3.4. Perhaps the fix for Wicket-1636 is the reason why the header check was never performed previously? I have head and body in my page's markup. Sven igor.vaynberg wrote: quickstart