Re: Apache Wicket & Static Analysis Security Testing

Hi, I would also always go for static code analysis if you have the possibility. Using Sonarqube I never had any Wicket related issues in the past. I can remember one rule (from the default java ruleset) that had to be customized because it identified the use of anonymous inner classes as bad

Re: Using Wicket to generate E-Mails.

Guten Tag Martin Grigorov, am Dienstag, 12. März 2019 um 17:12 schrieben Sie: > To render more complex markup you need to use ComponentRenderer. > You can render whole Pages or just Components (like Panels). Great, I'll have a look at that. > I do not understand what you mean with `adding

Re: Apache Wicket & Static Analysis Security Testing

Hi, I use the FindBugs (SpotBugs) plugin for IntelliJ to scan for vulnerabilities. It's actually not made for security bugs but there is a plugin (FindSecBugs) with a focus on that. In any case I'd say that it makes sense to use static code analyzers whenever possible. Most of the found

Re: Using Wicket to generate E-Mails.

Guten Tag, On Tue, Mar 12, 2019 at 5:57 PM Thorsten Schöning wrote: > Guten Tag Martin Grigorov, > am Dienstag, 12. März 2019 um 15:18 schrieben Sie: > > > There is an example how to do this in wicket-examples: > > - http://examples8x.wicket.apache.org/mailtemplate/ > > - >

Re: Using Wicket to generate E-Mails.

Guten Tag Martin Grigorov, am Dienstag, 12. März 2019 um 15:18 schrieben Sie: > There is an example how to do this in wicket-examples: > - http://examples8x.wicket.apache.org/mailtemplate/ > - >

Re: Apache Wicket & Static Analysis Security Testing

Hi, I am not aware of any such tool that has special rules for Wicket classes. Anyway, I think static analysis tools are still useful! On Tue, Mar 12, 2019 at 4:36 PM Eric Gulatee wrote: > Hello Wicketeers, > > Does anyone know if there are any SAST (Static Analysis Security Testing) > tools

Apache Wicket & Static Analysis Security Testing

Hello Wicketeers, Does anyone know if there are any SAST (Static Analysis Security Testing) tools (Commercial or OpenSource) that support Apache Wicket? https://www.owasp.org/index.php/Source_Code_Analysis_Tools Is there value in adopting a SAST tool if it doesn’t explicitly support the apache

Re: How to trace that a resource was requested?

Hi, You can use Link#onClick() to count and then throw RedirectToUrlException(urlFor(yourResourceReference)) that will lead to a redirect. On Tue, Mar 12, 2019 at 3:11 PM Per Newgro wrote: > Hello, > > i like to log that a resource (PDF file), generated in backend, was > requested. > > The

Re: Using Wicket to generate E-Mails.

Hi, There is an example how to do this in wicket-examples: - http://examples8x.wicket.apache.org/mailtemplate/ - https://github.com/apache/wicket/tree/master/wicket-examples/src/main/java/org/apache/wicket/examples/asemail On Tue, Mar 12, 2019 at 4:05 PM Thorsten Schöning wrote: > Hi all, > >

Using Wicket to generate E-Mails.

Hi all, I'm using Wicket for some frontend of some web app and pretty much like it because it allows me to clearly separate skins, language files, templates and to not mix too much view and business logic. My current requirements are to send mails in some web service backend and I want to use

Re: How to trace that a resource was requested?

Hi, Why not simply append a parameter to URL that tells download comes from your link? And use that to discriminate when to log or not... On Tue, Mar 12, 2019 at 4:11 PM Per Newgro wrote: > Hello, > > i like to log that a resource (PDF file), generated in backend, was > requested. > > The

How to trace that a resource was requested?

Hello, i like to log that a resource (PDF file), generated in backend, was requested. The resource is mounted by a resource reference. An external link is using url to resource reference. Download of file generated by resource is working. But I like to avoid log of every request to resource.