Hello,
After upgrading from Wicket 1.4.19 to Wicket 1.4.20 I get exceptions in
TinyMCE. We're using the Wicketstuff integration.
When opening TinyMCE lightboxes I get exception like :
org.apache.wicket.markup.html.PackageResource$PackageResourceBlockedException:
Access denied to (static)
Hi,
Yes, in 1.4.20 Wicket uses SecurePackageResourceGuard by default
because there was a security related issue. We will send an official
mail soon.
Many of the common extensions are allowed by default but .htm is not
one of them. You need to add this to YourApp#init():
Hi !
I faced a similar issue, but with PDF files used as PackageResource.
It boils down to wicket relying now by default on
SecurePackageResourceGuard which only authorizes file with some
extensions (defined in the SecurePackageResourceGuard constructor).
What I did was create my own
Martin and Antoine, thanks very much for your quick answers, it solves
of course my problem !
SecurePackageResourceGuard has already a lot of common extensions, and
it's easy to add the ones you eventualy need !
Martin, I still can't see in the 1.4.20 changelog
As I said this change is due to a security related problem.
An official announcement will come very soon.
We haven't sent it so far because we wanted to give you some time to
upgrade to 1.4.20/1.5.5 before making the problem public.
Sorry for the troubles!
On Wed, Mar 21, 2012 at 1:19 PM, Pierre
Le 21/03/2012 12:24, Martin Grigorov a écrit :
As I said this change is due to a security related problem.
An official announcement will come very soon.
We haven't sent it so far because we wanted to give you some time to
upgrade to 1.4.20/1.5.5 before making the problem public.
Sorry for the
