Re: ajax submit button not getting latest value

2013-05-28 Thread Martin Grigorov
Hi, The only problem I see is in your scenario. Why do you check the value in #getName() ? This method is called via reflection by CompoundPropertyModel before the model updates (form processing). You should expect the new value in AjaxButton#onSubmit(AjaxRequestTarget, Form). On Wed, May 29, 20

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread ChambreNoire
That's the problem. Session.bind() isn't called. I put a breakpoin in AbstractHttpSessionStore.bind() but still it's hard to tell what's causing this to be called... -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Session-creation-with-stateless-pages-in-Chrome-tp465

ajax submit button not getting latest value

2013-05-28 Thread Taro Fukunaga
Hi, I think I've reported this before but no one else seems to be able to reproduce it. In my app, I was seeing that the value from a field was always null after doing a submit. I went back to the Ajax submit form example that comes with Wicket 6.6 to see if I could reproduce it. I think the proble

Re: wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Martin Grigorov
Merged! Danke! On Tue, May 28, 2013 at 9:07 PM, Dieter Tremel wrote: > Am 28.05.2013 09:39, schrieb Martin Grigorov: > > You can form wicketstuff/core project and send a pull request with the > > upgrade. > > Well, I've made it. With a little luck and lot of horses. > ;-) (Silly slogan from a Ma

Re: Re:aj Component twice in markup while ax refresh in Wicket 6.7 (migrated from 1.5.10)

2013-05-28 Thread Maxim Solodovnik
I also saw this behavior using 6.8.0 The component with additional id was replaced, but there was time period when 2 components are present on page On Wed, May 29, 2013 at 12:12 AM, Heikki Uotinen < heikki.uoti...@syncrontech.com> wrote: > Hi, > > we had similar issue and could not find jira tic

Re: wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Dieter Tremel
Am 28.05.2013 09:39, schrieb Martin Grigorov: > You can form wicketstuff/core project and send a pull request with the > upgrade. Well, I've made it. With a little luck and lot of horses. ;-) (Silly slogan from a Marlboro cigarette commercial in germany from about 1990) https://github.com/wickets

RE: Re:aj Component twice in markup while ax refresh in Wicket 6.7 (migrated from 1.5.10)

2013-05-28 Thread Heikki Uotinen
Hi, we had similar issue and could not find jira ticket for this, thus created WICKET-5210 with quickstart. Our workaround was changing our jQuery('#someid').. to jQuery('[id=someid]').. to match all same (two) ids. Rgds, Heikki -Original Message- From: Nico [mailto:nico.kan...@gmx.de

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread Bas Gooren
Simply by having a look at your tomcat (or reverse proxy) access log? Of course this is only needed if the page you are hitting has links to other, stateful pages. You can also set a breakpoint in Session.bind() to see when it's called. Met vriendelijke groet, Kind regards, Bas Gooren Op 28-

Re: Is it possible to add a static prefix to the generated URL from CryptoMapper?

2013-05-28 Thread Martin Grigorov
Hi Magnus, At the moment this doesn't seem to be very easy because #encryptUrl() and #decryptUrl() methods are private.. If they were protected then it would be quite easy to extend the class and provide your own #mapHandler() / #mapRequest() methods which decide themselves what to encrypt/decrypt

Is it possible to add a static prefix to the generated URL from CryptoMapper?

2013-05-28 Thread Magnus K Karlsson
Hi! I'm successfully testing CryptoMapper in Apache Wicket 6 with unique URL for each Session. But I'm also depending on to be able to define security constaint in the web.xml. example-wicket /user/* These are the roles who have

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
The solution to generate unique URL for each session is to change the default ICryptFactory to KeyInSessionSunJceCryptFactory. getSecuritySettings().setCryptFactory(new KeyInSessionSunJceCryptFactory()); setRootRequestMapper(new CryptoMapper(getRootRequestMapper(), this)); 2013/

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread ChambreNoire
How would I check this? I disabled "Predict network actions to improve page load performance" but that hasn't changed anything. Thanks -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Session-creation-with-stateless-pages-in-Chrome-tp4659106p4659111.html Sent from th

Re: Session creation with stateless pages in Chrome

2013-05-28 Thread Bas Gooren
Have you checked if Chrome is prefetching other pages (which may be stateful)? Met vriendelijke groet, Kind regards, Bas Gooren Op 28-5-2013 12:14, schreef ChambreNoire: Hello folks, I have rendered all of my pre-login wicket pages fully stateless. I have just noticed that while no wicket se

Re: Re: Re: wicket 6 and a confirm dialog

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 1:54 PM, Marcel Hoerr wrote: > Hi Martin, > > yeah you're right, the onclick solution still works for non-Ajax links. > This should be mentionend in the wiki too, i was irritated about the > "earlier wicket versions" paragraph. > The WIKI is editable by everyone. Please i

Aw: Re: Re: wicket 6 and a confirm dialog

2013-05-28 Thread Marcel Hoerr
Hi Martin, yeah you're right, the onclick solution still works for non-Ajax links. This should be mentionend in the wiki too, i was irritated about the "earlier wicket versions" paragraph. But the onclick solution with a Behavior (or AttributeModifier) is not working for our Ajax Components any

Session creation with stateless pages in Chrome

2013-05-28 Thread ChambreNoire
Hello folks, I have rendered all of my pre-login wicket pages fully stateless. I have just noticed that while no wicket sessions are created until a valid login occurs using most browsers, when accessing the site via Google Chrome, the wicket session is bound after the initial rendering. As for va

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
i might have solved the problem the default ICryptFactory is /** * Default crypt factory. This factory will instantiate a {@link SunJceCrypt} once and cache it for * all further invocations of {@link #newCrypt()}. * * @author Igor Vaynberg (ivaynberg) */ public class CachingSunJceCryptFactory

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Martin Grigorov
Hi, Your app fails to start due to: WARN - AbstractLifeCycle - FAILED org.eclipse.jetty.security.ConstraintSecurityHandler@70e434d: java.lang.IllegalStateException: No LoginService for org.eclipse.jetty.security.authentication.FormAuthenticator@c163956 in org.eclipse.jetty.security.Const

Re: How to create https link to a page?

2013-05-28 Thread Alexey Mukas
Thanks Martin -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/How-to-create-https-link-to-a-page-tp4659050p4659102.html Sent from the Users forum mailing list archive at Nabble.com. - To unsubscribe

Re: Best way to choose different render

2013-05-28 Thread coincoinfou
h ok ! thank you -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Best-way-to-choose-different-render-tp4658976p4659101.html Sent from the Users forum mailing list archive at Nabble.com. - To un

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
That's quite critical for form component input processing too.. 2013/5/28 Martin Grigorov : > On Tue, May 28, 2013 at 11:22 AM, Martin Makundi < > martin.maku...@koodaripalvelut.com> wrote: > >> Ajax update might be tricky, it uses component ids. >> > > True. > You can override FormComponent#getIn

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 11:22 AM, Martin Makundi < martin.maku...@koodaripalvelut.com> wrote: > Ajax update might be tricky, it uses component ids. > True. You can override FormComponent#getInputName() to make them stable... > > 2013/5/28 Martin Grigorov : > > On Tue, May 28, 2013 at 11:00 AM,

Re: How to create https link to a page?

2013-05-28 Thread Martin Grigorov
Hi Alexey, On Tue, May 28, 2013 at 11:21 AM, Alexey Mukas wrote: > Hi Martin, > > I've made further investigations and found the problem, it was an order of > 'mounting pages' and 'setRootRequestMapper'. > > If mounting goes first everything works fine (the URL to Loging generated > with HTTPS),

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Ajax update might be tricky, it uses component ids. 2013/5/28 Martin Grigorov : > On Tue, May 28, 2013 at 11:00 AM, Ernesto Reinaldo Barreiro < > reier...@gmail.com> wrote: > >> Hi Martin, >> >> Martin Makundi wants to rebuild the ListView items when the form is >> > submitted. >> > I.e. the form

Re: How to create https link to a page?

2013-05-28 Thread Alexey Mukas
Hi Martin, I've made further investigations and found the problem, it was an order of 'mounting pages' and 'setRootRequestMapper'. If mounting goes first everything works fine (the URL to Loging generated with HTTPS), but if I change the order the URL is generated for HTTP and there is no redirec

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 11:03 AM, Magnus K Karlsson < magnus.r.karls...@gmail.com> wrote: > Thanks for your fast reply! > > I have tested CryptoMapper, but as far as I can see the CryptoMapper does > not return unique URL for each session, as suggested by OWASP > The session id is used to encrypt

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 11:00 AM, Ernesto Reinaldo Barreiro < reier...@gmail.com> wrote: > Hi Martin, > > Martin Makundi wants to rebuild the ListView items when the form is > > submitted. > > I.e. the form components will be created and then the form processing > will > > proceed. > > > > Yes, I

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
> Martin Makundi wants to rebuild the ListView items when the form is >> submitted. >> I.e. the form components will be created and then the form processing will >> proceed. >> >> Yes, I understand that. But my point would match the info coming from > client with new component tree being created?

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
Thanks for your fast reply! I have tested CryptoMapper, but as far as I can see the CryptoMapper does not return unique URL for each session, as suggested by OWASP "The synchronizer token pattern requires the generating of random "challenge" tokens that are associated with the user's current sess

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
> I look at the code in master branch (7.x) and I guess you still use 1.4.x. > In 7.x Form#process() is the first non-final method where you can plug your > code. > I doubt that 1.4 is different in this area but you can check yourself. > Start from Form#onFormSubmitted() and follow the flow. Thank

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
Hi Martin, Martin Makundi wants to rebuild the ListView items when the form is > submitted. > I.e. the form components will be created and then the form processing will > proceed. > > Yes, I understand that. But my point would match the info coming from client with new component tree being created

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Hi! > @Martin, > > Sometimes when wheels at hand are not good enough for a certain terrain you > should ask yourself if it it not easier to invent a new one. Only shortsightedness might get one convinced that writing new code is easier than levaraging legacy..eventually ;) [1] [1] http://www.a

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 10:51 AM, Martin Makundi < martin.maku...@koodaripalvelut.com> wrote: > 2013/5/28 Martin Grigorov : > > On Tue, May 28, 2013 at 10:41 AM, Martin Makundi < > > martin.maku...@koodaripalvelut.com> wrote: > > > >> > You could not use normal form processing, I guess, as there w

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
Hi Ernesto, On Tue, May 28, 2013 at 10:51 AM, Ernesto Reinaldo Barreiro < reier...@gmail.com> wrote: > Hi, > > > On Tue, May 28, 2013 at 11:46 AM, Martin Grigorov >wrote: > > > On Tue, May 28, 2013 at 10:41 AM, Martin Makundi < > > martin.maku...@koodaripalvelut.com> wrote: > > > > > > You coul

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
2013/5/28 Martin Grigorov : > On Tue, May 28, 2013 at 10:41 AM, Martin Makundi < > martin.maku...@koodaripalvelut.com> wrote: > >> > You could not use normal form processing, I guess, as there will not be >> any >> > form components at server side... (they will be removed after list is >> > display

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
Hi, On Tue, May 28, 2013 at 11:46 AM, Martin Grigorov wrote: > On Tue, May 28, 2013 at 10:41 AM, Martin Makundi < > martin.maku...@koodaripalvelut.com> wrote: > > > > You could not use normal form processing, I guess, as there will not be > > any > > > form components at server side... (they wil

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
On Tue, May 28, 2013 at 10:41 AM, Martin Makundi < martin.maku...@koodaripalvelut.com> wrote: > > You could not use normal form processing, I guess, as there will not be > any > > form components at server side... (they will be removed after list is > > displayed). So, you will have to do some tic

Re: Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Martin Grigorov
Hi, On Tue, May 28, 2013 at 10:32 AM, Magnus K Karlsson < magnus.r.karls...@gmail.com> wrote: > Hi, > > I'm looking for protection against CSRF and found and old issue for Apache > Wicket 1.3.4. > > https://issues.apache.org/jira/browse/WICKET-1782 > > And as far as have understood the Apache Wi

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
> You could not use normal form processing, I guess, as there will not be any > form components at server side... (they will be removed after list is > displayed). So, you will have to do some ticks to map cliente state with > server state. > > The examples above could be make to work for non read-

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
You could not use normal form processing, I guess, as there will not be any form components at server side... (they will be removed after list is displayed). So, you will have to do some ticks to map cliente state with server state. The examples above could be make to work for non read-only situat

Re: wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Martin Grigorov
Hi Dieter, No one worked on this integration lately. You can form wicketstuff/core project and send a pull request with the upgrade. Thanks! On Tue, May 28, 2013 at 10:34 AM, Dieter Tremel wrote: > In wicketstuff-jasperreports the dependency to jasper is > > > >

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
You can try to do this in org.apache.wicket.markup.html.form.Form#process(IFormSubmitter) { rebuild(); super.process(formSubmitter); } On Tue, May 28, 2013 at 10:29 AM, Martin Makundi < martin.maku...@koodaripalvelut.com> wrote: > Is it possible to have the listview rebuild itself upon form

Re: Validating a PropertyListView

2013-05-28 Thread madmax108
Ah... cool! :) Will try this and let you know! The code u sent is very similar to what I have, and just reminded me of a way I can get this done Thanks again... will get back with the results :) -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Validating-a-PropertyL

wicketstuff-jasperreports dependency to jasper reports

2013-05-28 Thread Dieter Tremel
In wicketstuff-jasperreports the dependency to jasper is > > jasperreports > jasperreports > That leads to version 3.5.3 I found http://mvnrepository.com/artifact/net.sf.jasperreports/jasperreports/5.1.0, so the newer versi

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
> You could use something that builds itself at client side... while at > server side is still very lightweight. > Something like > > http://www.antiliasoft.com/wicket-angular-demo/filtering > > See for explanation. > > http://www.antiliasoft.com/wicket-angular-demo/ This is mainly read-only? We w

Protection against CSRF (Cross-Site Request Forgery) attacks in Apache Wicket 6

2013-05-28 Thread Magnus K Karlsson
Hi, I'm looking for protection against CSRF and found and old issue for Apache Wicket 1.3.4. https://issues.apache.org/jira/browse/WICKET-1782 And as far as have understood the Apache Wicket does not support Synchronizer Token Pattern, as suggested at https://www.owasp.org/index.php/Cross-Site_

Re: Dynamic listview

2013-05-28 Thread Ernesto Reinaldo Barreiro
Martin, You could use something that builds itself at client side... while at server side is still very lightweight. Something like http://www.antiliasoft.com/wicket-angular-demo/filtering See for explanation. http://www.antiliasoft.com/wicket-angular-demo/ On Tue, May 28, 2013 at 11:01 AM, M

Re: Dynamic listview

2013-05-28 Thread Martin Makundi
Is it possible to have the listview rebuild itself upon form processing to allow formcomponents? ** Martin 2013/5/28 Martin Grigorov : > Hi, > > You can use ListView#removeAll() in #detach() but then this ListView should > not have any action components > like Link/Button and any FormComponents i

Re: Dynamic listview

2013-05-28 Thread Martin Grigorov
Hi, You can use ListView#removeAll() in #detach() but then this ListView should not have any action components like Link/Button and any FormComponents in its items, because they won't be reachable. It can have pretty much only Labels inside. On Tue, May 28, 2013 at 10:01 AM, Martin Makundi < mar

Dynamic listview

2013-05-28 Thread Martin Makundi
Hi! Is it possible to implement a listview that evaporates on detach and builds itself again whenever one iterates over its items? We have a huge page with thuge listview and the serialization/deserialization of the structure slows down the page. The models are detachable and maybe the component