Roadmap of Apache Wicket 2024 or is the project nearly dead?

2024-03-13 Thread Kyrindorx

Hello everyone,

what are the plans for Apache Wicket 2024? Migration to Java 17, 21? 
Upgrade to compatibility with spring-boot 3.x? Is there a roadmap and 
plan for the project somewhere?


Thanks in advance for some information for further plans on Apache Wicket.

Best regards
Kyrindor

-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: Is Wicket In Action still relevant?

2023-05-13 Thread Kyrindorx

Hello all,

Is the topic "Wicket in Action" the book meant, this was a 
misunderstanding, sorry!


I myself still work with Apache Wicket 8.x and maintain a product with 
it. We have written our own components and removed the third party 
libraries because they are no longer maintained.


In the past years the number of developers, extensions and examples on 
the internet has decreased a lot.


The framework is good(!) and it allows a very good base for server-side 
rendering without all the JS technologies.


It was noted that many things depend on the scope, requirements, and 
knowledge of the developers. Yes, this is all correct!


However, Apache Wicket is comparatively as complex as the modern JS 
frameworks and I don't see the Java vs Javascript argument as serious 
here.  It's more about innovation, product maintenance, and security in 
the choice of framework. This includes release cycles, bug fixing, 
documentation, and the number of users of a framework. These factors 
demonstrably decreased and for a new development or continuation of a 
project a risk!


Kind regards
Kyrindor

Am 13.05.2023 um 16:41 schrieb Andrea Del Bene:

Hi,

I think you have misread the title of the original mail which is about 
a book, "Wicket in Action", and not about Wicket itself. That said, I 
agree when you say that for Wicket might be difficult to find plugin 
and integration libraries available out of the box. That's because 
Wicket is completely lead on a voluntary base and it's not backed by 
any company. But I completely disagree with your conclusion. Wicket 
remains highly flexible and can be used to implement application of 
any size without embrace the canonical JS development stack (npm, 
node, css compilers, etc...) which I personally find overcomplex and 
overbloated to use. In this regard a powerful tool to use with Wicket 
(and with many other Java web frameworks) is project WebJar, which 
makes css/js libraries integration quite easy: https://www.webjars.org.


Andrea.

On 12/05/23 20:14, Kyrindorx wrote:

Hey all

It is compact, has many functions and does its job well. If you 
compare it with JSF, Vaadin it compares well.


Advantages:
- flexible
- Java + HTML > is ok

Disadvantages:
- modern plugins for Wicket: outdated and quite little.
- CSS Libs like Bootstrap: outdated and strong coupling (plugin)
- use of modern JS techniques + Wicket: difficult

Conclusion:

For medium sized sites working with Apache Wicket basic components 
and using Java, HTML and Wicket JQuery > ok.


The development of modern JS applications Apache Wicket is (my 
opinion) outdated. It very good flexible JS frameworks, more plugins, 
lots of docs and examples. And the number of developers for modern JS 
frameworks is huge!


In the end, I think Apache Wicket is past its prime and we are 
talking about product maintenance here. I wouldn't develop new big 
projects with Apache Wicket anymore. Here it is not the evaluation of 
the framework, but the number of projects and the amount of 
developers that matters.


Greets
Kyrindor
--

Am 11.05.2023 um 14:23 schrieb Andrea Del Bene:
If you are new to Apache Wicket it might be better starting with the 
user
guide which is meant for a full introduction from scratch and is 
updated.


On Thu, 11 May 2023, 10:29 James Selvakumar,  
wrote:



Hi all,

Just wondering whether Wicket in Action is still relevant with all the
recent changes to Wicket? Can it be used to help a new developer 
understand

Wicket?

--
Thanks & regards
James



-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: Is Wicket In Action still relevant?

2023-05-12 Thread Kyrindorx

Hey all

It is compact, has many functions and does its job well. If you compare 
it with JSF, Vaadin it compares well.


Advantages:
- flexible
- Java + HTML > is ok

Disadvantages:
- modern plugins for Wicket: outdated and quite little.
- CSS Libs like Bootstrap: outdated and strong coupling (plugin)
- use of modern JS techniques + Wicket: difficult

Conclusion:

For medium sized sites working with Apache Wicket basic components and 
using Java, HTML and Wicket JQuery > ok.


The development of modern JS applications Apache Wicket is (my opinion) 
outdated. It very good flexible JS frameworks, more plugins, lots of 
docs and examples. And the number of developers for modern JS frameworks 
is huge!


In the end, I think Apache Wicket is past its prime and we are talking 
about product maintenance here. I wouldn't develop new big projects with 
Apache Wicket anymore. Here it is not the evaluation of the framework, 
but the number of projects and the amount of developers that matters.


Greets
Kyrindor
--

Am 11.05.2023 um 14:23 schrieb Andrea Del Bene:

If you are new to Apache Wicket it might be better starting with the user
guide which is meant for a full introduction from scratch and is updated.

On Thu, 11 May 2023, 10:29 James Selvakumar,  wrote:


Hi all,

Just wondering whether Wicket in Action is still relevant with all the
recent changes to Wicket? Can it be used to help a new developer understand
Wicket?

--
Thanks & regards
James



-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: spring-bean RCE (indirect vulnerability of Servlet/jsp request get/post)

2022-04-07 Thread kyrindorx

Thank you for your advice and help :)

Am 05.04.2022 um 21:54 schrieb Andrea Del Bene:
Also it is worth mentioning that we have an upcoming version (9.9.1) 
that has Spring core dependency updated to 5.3.18


On 05/04/22 21:47, Martin Grigorov wrote:

On Tue, Apr 5, 2022, 13:18 kyrindorx  wrote:


Hi,

Thank you for the first answer of this issue. I have also a question
about https://github.com/MarcGiffing/wicket-spring-boot and a 
upgrade of

spring-beans or spring in general. Do you have good idea upgrade spring
to version 5.2.20, 5.3.18 without an impact with wicket-spring-boot?
I'll thankful for any hints :)

Just update/overwrite the Spring version in your pom.xml and all 
should be

fine!



Background:

https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751


Greets
Daniel


Am 01.04.2022 um 20:17 schrieb Martin Grigorov:

Hi,

I don't think a normal Wicket application is vulnerable to this 
attack.

But I recommend you to update Spring in your applications anyway.

On Fri, Apr 1, 2022, 10:21 kyrindorx  wrote:


Hello everyone,

The internet developer community found a bug in
spring-beans/spring-webmvc on 03/30/2022. I would like to know to 
what
extent Wicket could be affected for this exploit? I think it 
should be a
specific behavior with Spring and the servlet engine (Tomcat was 
used in

the exploit), but Wicket is also a servlet-driven web framework.

The exploit used a code injection block with "<% bad java 
code/cmds %>"
and a beanintrospeaction via a rest service call. What is the 
opinion of

the Wicket core team on this issue?

Thanks in advance
Daniel


Sources:
https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751
(informed by github)
https://tanzu.vmware.com/security/cve-2022-22965
https://github.com/tweedge/springcore-0day-en


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: spring-bean RCE (indirect vulnerability of Servlet/jsp request get/post)

2022-04-05 Thread kyrindorx

Hi,

Thank you for the first answer of this issue. I have also a question 
about https://github.com/MarcGiffing/wicket-spring-boot and a upgrade of 
spring-beans or spring in general. Do you have good idea upgrade spring 
to version 5.2.20, 5.3.18 without an impact with wicket-spring-boot? 
I'll thankful for any hints :)


Background:

https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751


Greets
Daniel


Am 01.04.2022 um 20:17 schrieb Martin Grigorov:

Hi,

I don't think a normal Wicket application is vulnerable to this attack.
But I recommend you to update Spring in your applications anyway.

On Fri, Apr 1, 2022, 10:21 kyrindorx  wrote:


Hello everyone,

The internet developer community found a bug in
spring-beans/spring-webmvc on 03/30/2022. I would like to know to what
extent Wicket could be affected for this exploit? I think it should be a
specific behavior with Spring and the servlet engine (Tomcat was used in
the exploit), but Wicket is also a servlet-driven web framework.

The exploit used a code injection block with "<% bad java code/cmds %>"
and a beanintrospeaction via a rest service call. What is the opinion of
the Wicket core team on this issue?

Thanks in advance
Daniel


Sources:
https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751
(informed by github)
https://tanzu.vmware.com/security/cve-2022-22965
https://github.com/tweedge/springcore-0day-en

spring-bean RCE (indirect vulnerability of Servlet/jsp request get/post)

2022-04-01 Thread kyrindorx

Hello everyone,

The internet developer community found a bug in 
spring-beans/spring-webmvc on 03/30/2022. I would like to know to what 
extent Wicket could be affected for this exploit? I think it should be a 
specific behavior with Spring and the servlet engine (Tomcat was used in 
the exploit), but Wicket is also a servlet-driven web framework.


The exploit used a code injection block with "<% bad java code/cmds %>" 
and a beanintrospeaction via a rest service call. What is the opinion of 
the Wicket core team on this issue?


Thanks in advance
Daniel


Sources:
https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751 
(informed by github)

https://tanzu.vmware.com/security/cve-2022-22965
https://github.com/tweedge/springcore-0day-en

Re: no-cache elements with ListItems (List of files to download them)

2019-07-22 Thread kyrindorx



Hey Sven,

I wrote a POC of this (https://github.com/geramaya/wicket-filedownload) 
and it runs well. It should be doesn't matter to use a repeater or list 
view with a model object, or?
My guess about this can be a bug to handle the listview and refresh ajax 
components inside the real application. The POC should have proven that 
the download function works correctly.


*sniff* So I have to check out and find the bug in the darkness of 
components.


Greets
Daniel

Am 22.07.2019 um 21:21 schrieb Sven Meier:

Hi,

your images didn't make it.

Can you create a quickstart showing your problem?

Have fun
Sven


On 22.07.19 17:02, Custodes Meus wrote:

Hello all,

Wicket 6.19.x

I have a problem with cached elements for a FileList as Repeater 
inside used a DownloadLink to get a file over http.


FileList Repeater:



grafik.png

If I disable the cache handling (save nothing) of Firefox and clear 
before open the page - my page will run successfully.


I reactived the caching of Firefox and tried to adapt the WebPage 
with header infos to disable caching of Elements. The behavior will 
fail, because

the list of files will not update correctly and responsed old filename.
grafik.png
Now I look for some infos about this. My page use ajax components - 
the page should run as a statefull page. Other elements are statefull!


I will thankfull for any kinds etc. :)

Greets
Daniel





-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: Problems with wicket examples 8.x

2019-03-10 Thread kyrindorx

Hey,

I've fixed with 8.3.0 and openJDK 11. Please check out in 
https://github.com/bitstorm/Wicket-tutorial-examples/pull/13



Greets
Daniel

Am 10.03.19 um 11:30 schrieb Maxim Solodovnik:

Wicket datetime was deprecated and moved to wicketstuff project

Please correct it's maven coordinates :)

On Sun, Mar 10, 2019, 17:27 kyrindorx  wrote:


Thx :)

The next problem is:

[ERROR] Failed to execute goal on project CustomDatepicker: Could not
resolve dependencies for project
org.wicketTutorial:CustomDatepicker:jar:1.0-SNAPSHOT: Failure to find
org.apache.wicket:wicket-datetime:jar:8.3.0 in
https://repo.maven.apache.org/maven2 was cached in the local repository,
resolution will not be reattempted until the update interval of central
has elapsed or updates are forced -> [Help 1]

The page
https://mvnrepository.com/artifact/org.apache.wicket/wicket-datetime
knows only 8.0.0-M7 as the newest version.

The pom.xml of the example fragements describe follow repo link:

  
  
  Apache Nexus
https://repository.apache.org/content/repositories/snapshots/
  
false
  
  
  
  
  

Where will the final versions provided? apache, maven central?

Greets
Daniel

Am 10.03.19 um 11:06 schrieb Maxim Solodovnik:

Hello Daniel,

It seems project a little bit outdated :(
please change wicket version here [1] to be "8.3.0"

[1]

https://github.com/bitstorm/Wicket-tutorial-examples/blob/master/pom.xml#L27

On Sun, 10 Mar 2019 at 16:48, kyrindorx  wrote:

Hey all,

I tried to compile and run the Wicket examples of
https://github.com/bitstorm/Wicket-tutorial-examples.git master branch.
My setup is Linux, OpenJDK 11, Maven 3.5.4

The error output of the mvn install or compile command was:

[ERROR] Failed to execute goal on project BindSessionExample: Could not
resolve dependencies for project
org.wicketTutorial:BindSessionExample:jar:1.0-SNAPSHOT: Failure to find
org.apache.wicket:wicket-core:jar:8.0.0-SNAPSHOT in
https://repository.apache.org/content/repositories/snapshots/ was

cached

in the local repository, resolution will not be reattempted until the
update interval of Apache Nexus has elapsed or updates are forced ->
[Help 1]

Is it required to add a repository to compile the examples?

Greets
Daniel


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: Problems with wicket examples 8.x

2019-03-10 Thread kyrindorx

Thx :)

The next problem is:

[ERROR] Failed to execute goal on project CustomDatepicker: Could not 
resolve dependencies for project 
org.wicketTutorial:CustomDatepicker:jar:1.0-SNAPSHOT: Failure to find 
org.apache.wicket:wicket-datetime:jar:8.3.0 in 
https://repo.maven.apache.org/maven2 was cached in the local repository, 
resolution will not be reattempted until the update interval of central 
has elapsed or updates are forced -> [Help 1]


The page 
https://mvnrepository.com/artifact/org.apache.wicket/wicket-datetime 
knows only 8.0.0-M7 as the newest version.


The pom.xml of the example fragements describe follow repo link:

    
    
    Apache Nexus
https://repository.apache.org/content/repositories/snapshots/
    
false
    
    
    
    
    

Where will the final versions provided? apache, maven central?

Greets
Daniel

Am 10.03.19 um 11:06 schrieb Maxim Solodovnik:

Hello Daniel,

It seems project a little bit outdated :(
please change wicket version here [1] to be "8.3.0"

[1] https://github.com/bitstorm/Wicket-tutorial-examples/blob/master/pom.xml#L27

On Sun, 10 Mar 2019 at 16:48, kyrindorx  wrote:

Hey all,

I tried to compile and run the Wicket examples of
https://github.com/bitstorm/Wicket-tutorial-examples.git master branch.
My setup is Linux, OpenJDK 11, Maven 3.5.4

The error output of the mvn install or compile command was:

[ERROR] Failed to execute goal on project BindSessionExample: Could not
resolve dependencies for project
org.wicketTutorial:BindSessionExample:jar:1.0-SNAPSHOT: Failure to find
org.apache.wicket:wicket-core:jar:8.0.0-SNAPSHOT in
https://repository.apache.org/content/repositories/snapshots/ was cached
in the local repository, resolution will not be reattempted until the
update interval of Apache Nexus has elapsed or updates are forced ->
[Help 1]

Is it required to add a repository to compile the examples?

Greets
Daniel


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Problems with wicket examples 8.x

2019-03-10 Thread kyrindorx

Hey all,

I tried to compile and run the Wicket examples of 
https://github.com/bitstorm/Wicket-tutorial-examples.git master branch.

My setup is Linux, OpenJDK 11, Maven 3.5.4

The error output of the mvn install or compile command was:

[ERROR] Failed to execute goal on project BindSessionExample: Could not 
resolve dependencies for project 
org.wicketTutorial:BindSessionExample:jar:1.0-SNAPSHOT: Failure to find 
org.apache.wicket:wicket-core:jar:8.0.0-SNAPSHOT in 
https://repository.apache.org/content/repositories/snapshots/ was cached 
in the local repository, resolution will not be reattempted until the 
update interval of Apache Nexus has elapsed or updates are forced -> 
[Help 1]


Is it required to add a repository to compile the examples?

Greets
Daniel


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Wicket Components

2018-10-05 Thread kyrindorx

Hello everybody,

I am looking for a component frame or some individual components with 
wicket. The Wicket examples show some simple solutions, but I want to 
have a collection of GUI components like Primefaces 
(https://www.primefaces.org/). Does anyone know such a project?


I am grateful for hints and ideas :)

greetings
Kyrindor


Re: apache wicket 8.0 or 8.x

2018-09-29 Thread kyrindorx



@Maxim: Thx :)


Am 29.09.2018 um 14:13 schrieb Maxim Solodovnik:

To change jquery version being used you can call
getJavaScriptLibrarySettings().setJQueryReference(org.apache.wicket.resource.JQueryResourceReference.getV3());
inside you Application.init()

On Sat, 29 Sep 2018 at 18:35, kyrindorx  wrote:


Hey all,

I started with a new little webpage with Apache Wicket 8.0. I would use
Bootstrap 4.0 as html grid and jquery for it. But wicket use jquery
2.2.4 as distrib version in version 8.0.

So I have some questions about it:

- Can I use Bootstrap 4 or better go on with 3.3.7
- JQuery 2.2.4 is outdated EOL and will not get further updates.
- When will Apache Wicket shipping a new version of JQuery?

Greets
Kyrindor


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



apache wicket 8.0 or 8.x

2018-09-29 Thread kyrindorx

Hey all,

I started with a new little webpage with Apache Wicket 8.0. I would use 
Bootstrap 4.0 as html grid and jquery for it. But wicket use jquery 
2.2.4 as distrib version in version 8.0.


So I have some questions about it:

- Can I use Bootstrap 4 or better go on with 3.3.7
- JQuery 2.2.4 is outdated EOL and will not get further updates.
- When will Apache Wicket shipping a new version of JQuery?

Greets
Kyrindor


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Wicket and Spring Rest (MVC & DispatcherServlet)

2018-07-20 Thread kyrindorx



Hi,

I have to run a wicket app in the Servlet Context / Path "/*". I want to 
use Spring MVC with Rest on "/api/*".


I found the WicketSessionFilter and some infos about it, but I can't see 
a way to delegate into the Spring DispatcherServlet with "/*" bind on 
the Wicket application filter.


I'll thankful for some hints :)

Greats
Kyrindorx


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Re: Just handle java properties files with Apache Wicket

2018-05-26 Thread kyrindorx

Hi,

The goal of the programm is the handling of properties files with excel 
and languages. The programm will create a config property file and 
database files into .locapp in your user home directory.


* scan your project for *.properties files (cmd: f DIR)
* import properties into the database (cmd: ip)
* get excel with a column for each language (cmd: ee DIR)
* (re)import excel file (cmd: ei path-to-file)
* write it back to properties files (cmd: ep DIR)
* ask for integrity between properties files (SRC) vs. excel data (XLS): 
(cmd: ci [LANGUAGE])

* count entries for analysing your differences between languages (cmd: pc)
* find empty entries for all languages or one language with the empty 
flag ("1")
* get single language and optional only empty values (cmd: ee DIR en 1) 
-> en=language; 1=empty strings


- You can export all entries with all languages
- You can export single language with all entries or only with empty values
- You can merge entries from SRC (properties files) or XLS with versions
    Example: "mp XLS" will merge XLS entries with version 1 and version 
2 - the higher version will win.


- write back into properties with "ep DIR". The programm exports the 
last version of XLS entries into the know files (cmd f). If your last 
excel-import(ei) was a fullset or subset of entries, so you can export 
only this and not all known properties.


Greets
Kyrindor


Am 26.05.2018 um 13:43 schrieb Martin Grigorov:

Hi,

 From the project's README it is not very clear to me what your application
does but it reminds me of
https://github.com/pingunaut/wicketmessages-maven-plugin

On Fri, May 25, 2018 at 8:13 PM, kyrindorx <kyrind...@gmail.com> wrote:


Hey all,

I have a idea to handle java properties files in Apache Wicket. We use
this little helper in our projects, too :)
So check it out and test it: https://t.co/7RNgdC6VlD

Bye
Kyrindor

PS: It's open source (MIT License)


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org



Just handle java properties files with Apache Wicket

2018-05-25 Thread kyrindorx

Hey all,

I have a idea to handle java properties files in Apache Wicket. We use 
this little helper in our projects, too :)

So check it out and test it: https://t.co/7RNgdC6VlD

Bye
Kyrindor

PS: It's open source (MIT License)


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org