Roadmap of Apache Wicket 2024 or is the project nearly dead?
Hello everyone, what are the plans for Apache Wicket 2024? Migration to Java 17, 21? Upgrade to compatibility with spring-boot 3.x? Is there a roadmap and plan for the project somewhere? Thanks in advance for some information for further plans on Apache Wicket. Best regards Kyrindor - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Is Wicket In Action still relevant?
Hello all, Is the topic "Wicket in Action" the book meant, this was a misunderstanding, sorry! I myself still work with Apache Wicket 8.x and maintain a product with it. We have written our own components and removed the third party libraries because they are no longer maintained. In the past years the number of developers, extensions and examples on the internet has decreased a lot. The framework is good(!) and it allows a very good base for server-side rendering without all the JS technologies. It was noted that many things depend on the scope, requirements, and knowledge of the developers. Yes, this is all correct! However, Apache Wicket is comparatively as complex as the modern JS frameworks and I don't see the Java vs Javascript argument as serious here. It's more about innovation, product maintenance, and security in the choice of framework. This includes release cycles, bug fixing, documentation, and the number of users of a framework. These factors demonstrably decreased and for a new development or continuation of a project a risk! Kind regards Kyrindor Am 13.05.2023 um 16:41 schrieb Andrea Del Bene: Hi, I think you have misread the title of the original mail which is about a book, "Wicket in Action", and not about Wicket itself. That said, I agree when you say that for Wicket might be difficult to find plugin and integration libraries available out of the box. That's because Wicket is completely lead on a voluntary base and it's not backed by any company. But I completely disagree with your conclusion. Wicket remains highly flexible and can be used to implement application of any size without embrace the canonical JS development stack (npm, node, css compilers, etc...) which I personally find overcomplex and overbloated to use. In this regard a powerful tool to use with Wicket (and with many other Java web frameworks) is project WebJar, which makes css/js libraries integration quite easy: https://www.webjars.org. Andrea. On 12/05/23 20:14, Kyrindorx wrote: Hey all It is compact, has many functions and does its job well. If you compare it with JSF, Vaadin it compares well. Advantages: - flexible - Java + HTML > is ok Disadvantages: - modern plugins for Wicket: outdated and quite little. - CSS Libs like Bootstrap: outdated and strong coupling (plugin) - use of modern JS techniques + Wicket: difficult Conclusion: For medium sized sites working with Apache Wicket basic components and using Java, HTML and Wicket JQuery > ok. The development of modern JS applications Apache Wicket is (my opinion) outdated. It very good flexible JS frameworks, more plugins, lots of docs and examples. And the number of developers for modern JS frameworks is huge! In the end, I think Apache Wicket is past its prime and we are talking about product maintenance here. I wouldn't develop new big projects with Apache Wicket anymore. Here it is not the evaluation of the framework, but the number of projects and the amount of developers that matters. Greets Kyrindor -- Am 11.05.2023 um 14:23 schrieb Andrea Del Bene: If you are new to Apache Wicket it might be better starting with the user guide which is meant for a full introduction from scratch and is updated. On Thu, 11 May 2023, 10:29 James Selvakumar, wrote: Hi all, Just wondering whether Wicket in Action is still relevant with all the recent changes to Wicket? Can it be used to help a new developer understand Wicket? -- Thanks & regards James - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Is Wicket In Action still relevant?
Hey all It is compact, has many functions and does its job well. If you compare it with JSF, Vaadin it compares well. Advantages: - flexible - Java + HTML > is ok Disadvantages: - modern plugins for Wicket: outdated and quite little. - CSS Libs like Bootstrap: outdated and strong coupling (plugin) - use of modern JS techniques + Wicket: difficult Conclusion: For medium sized sites working with Apache Wicket basic components and using Java, HTML and Wicket JQuery > ok. The development of modern JS applications Apache Wicket is (my opinion) outdated. It very good flexible JS frameworks, more plugins, lots of docs and examples. And the number of developers for modern JS frameworks is huge! In the end, I think Apache Wicket is past its prime and we are talking about product maintenance here. I wouldn't develop new big projects with Apache Wicket anymore. Here it is not the evaluation of the framework, but the number of projects and the amount of developers that matters. Greets Kyrindor -- Am 11.05.2023 um 14:23 schrieb Andrea Del Bene: If you are new to Apache Wicket it might be better starting with the user guide which is meant for a full introduction from scratch and is updated. On Thu, 11 May 2023, 10:29 James Selvakumar, wrote: Hi all, Just wondering whether Wicket in Action is still relevant with all the recent changes to Wicket? Can it be used to help a new developer understand Wicket? -- Thanks & regards James - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: spring-bean RCE (indirect vulnerability of Servlet/jsp request get/post)
Thank you for your advice and help :) Am 05.04.2022 um 21:54 schrieb Andrea Del Bene: Also it is worth mentioning that we have an upcoming version (9.9.1) that has Spring core dependency updated to 5.3.18 On 05/04/22 21:47, Martin Grigorov wrote: On Tue, Apr 5, 2022, 13:18 kyrindorx wrote: Hi, Thank you for the first answer of this issue. I have also a question about https://github.com/MarcGiffing/wicket-spring-boot and a upgrade of spring-beans or spring in general. Do you have good idea upgrade spring to version 5.2.20, 5.3.18 without an impact with wicket-spring-boot? I'll thankful for any hints :) Just update/overwrite the Spring version in your pom.xml and all should be fine! Background: https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751 Greets Daniel Am 01.04.2022 um 20:17 schrieb Martin Grigorov: Hi, I don't think a normal Wicket application is vulnerable to this attack. But I recommend you to update Spring in your applications anyway. On Fri, Apr 1, 2022, 10:21 kyrindorx wrote: Hello everyone, The internet developer community found a bug in spring-beans/spring-webmvc on 03/30/2022. I would like to know to what extent Wicket could be affected for this exploit? I think it should be a specific behavior with Spring and the servlet engine (Tomcat was used in the exploit), but Wicket is also a servlet-driven web framework. The exploit used a code injection block with "<% bad java code/cmds %>" and a beanintrospeaction via a rest service call. What is the opinion of the Wicket core team on this issue? Thanks in advance Daniel Sources: https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751 (informed by github) https://tanzu.vmware.com/security/cve-2022-22965 https://github.com/tweedge/springcore-0day-en - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: spring-bean RCE (indirect vulnerability of Servlet/jsp request get/post)
Hi, Thank you for the first answer of this issue. I have also a question about https://github.com/MarcGiffing/wicket-spring-boot and a upgrade of spring-beans or spring in general. Do you have good idea upgrade spring to version 5.2.20, 5.3.18 without an impact with wicket-spring-boot? I'll thankful for any hints :) Background: https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751 Greets Daniel Am 01.04.2022 um 20:17 schrieb Martin Grigorov: Hi, I don't think a normal Wicket application is vulnerable to this attack. But I recommend you to update Spring in your applications anyway. On Fri, Apr 1, 2022, 10:21 kyrindorx wrote: Hello everyone, The internet developer community found a bug in spring-beans/spring-webmvc on 03/30/2022. I would like to know to what extent Wicket could be affected for this exploit? I think it should be a specific behavior with Spring and the servlet engine (Tomcat was used in the exploit), but Wicket is also a servlet-driven web framework. The exploit used a code injection block with "<% bad java code/cmds %>" and a beanintrospeaction via a rest service call. What is the opinion of the Wicket core team on this issue? Thanks in advance Daniel Sources: https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751 (informed by github) https://tanzu.vmware.com/security/cve-2022-22965 https://github.com/tweedge/springcore-0day-en
spring-bean RCE (indirect vulnerability of Servlet/jsp request get/post)
Hello everyone, The internet developer community found a bug in spring-beans/spring-webmvc on 03/30/2022. I would like to know to what extent Wicket could be affected for this exploit? I think it should be a specific behavior with Spring and the servlet engine (Tomcat was used in the exploit), but Wicket is also a servlet-driven web framework. The exploit used a code injection block with "<% bad java code/cmds %>" and a beanintrospeaction via a rest service call. What is the opinion of the Wicket core team on this issue? Thanks in advance Daniel Sources: https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751 (informed by github) https://tanzu.vmware.com/security/cve-2022-22965 https://github.com/tweedge/springcore-0day-en
Re: no-cache elements with ListItems (List of files to download them)
Hey Sven, I wrote a POC of this (https://github.com/geramaya/wicket-filedownload) and it runs well. It should be doesn't matter to use a repeater or list view with a model object, or? My guess about this can be a bug to handle the listview and refresh ajax components inside the real application. The POC should have proven that the download function works correctly. *sniff* So I have to check out and find the bug in the darkness of components. Greets Daniel Am 22.07.2019 um 21:21 schrieb Sven Meier: Hi, your images didn't make it. Can you create a quickstart showing your problem? Have fun Sven On 22.07.19 17:02, Custodes Meus wrote: Hello all, Wicket 6.19.x I have a problem with cached elements for a FileList as Repeater inside used a DownloadLink to get a file over http. FileList Repeater: grafik.png If I disable the cache handling (save nothing) of Firefox and clear before open the page - my page will run successfully. I reactived the caching of Firefox and tried to adapt the WebPage with header infos to disable caching of Elements. The behavior will fail, because the list of files will not update correctly and responsed old filename. grafik.png Now I look for some infos about this. My page use ajax components - the page should run as a statefull page. Other elements are statefull! I will thankfull for any kinds etc. :) Greets Daniel - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Problems with wicket examples 8.x
Hey, I've fixed with 8.3.0 and openJDK 11. Please check out in https://github.com/bitstorm/Wicket-tutorial-examples/pull/13 Greets Daniel Am 10.03.19 um 11:30 schrieb Maxim Solodovnik: Wicket datetime was deprecated and moved to wicketstuff project Please correct it's maven coordinates :) On Sun, Mar 10, 2019, 17:27 kyrindorx wrote: Thx :) The next problem is: [ERROR] Failed to execute goal on project CustomDatepicker: Could not resolve dependencies for project org.wicketTutorial:CustomDatepicker:jar:1.0-SNAPSHOT: Failure to find org.apache.wicket:wicket-datetime:jar:8.3.0 in https://repo.maven.apache.org/maven2 was cached in the local repository, resolution will not be reattempted until the update interval of central has elapsed or updates are forced -> [Help 1] The page https://mvnrepository.com/artifact/org.apache.wicket/wicket-datetime knows only 8.0.0-M7 as the newest version. The pom.xml of the example fragements describe follow repo link: Apache Nexus https://repository.apache.org/content/repositories/snapshots/ false Where will the final versions provided? apache, maven central? Greets Daniel Am 10.03.19 um 11:06 schrieb Maxim Solodovnik: Hello Daniel, It seems project a little bit outdated :( please change wicket version here [1] to be "8.3.0" [1] https://github.com/bitstorm/Wicket-tutorial-examples/blob/master/pom.xml#L27 On Sun, 10 Mar 2019 at 16:48, kyrindorx wrote: Hey all, I tried to compile and run the Wicket examples of https://github.com/bitstorm/Wicket-tutorial-examples.git master branch. My setup is Linux, OpenJDK 11, Maven 3.5.4 The error output of the mvn install or compile command was: [ERROR] Failed to execute goal on project BindSessionExample: Could not resolve dependencies for project org.wicketTutorial:BindSessionExample:jar:1.0-SNAPSHOT: Failure to find org.apache.wicket:wicket-core:jar:8.0.0-SNAPSHOT in https://repository.apache.org/content/repositories/snapshots/ was cached in the local repository, resolution will not be reattempted until the update interval of Apache Nexus has elapsed or updates are forced -> [Help 1] Is it required to add a repository to compile the examples? Greets Daniel - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Problems with wicket examples 8.x
Thx :) The next problem is: [ERROR] Failed to execute goal on project CustomDatepicker: Could not resolve dependencies for project org.wicketTutorial:CustomDatepicker:jar:1.0-SNAPSHOT: Failure to find org.apache.wicket:wicket-datetime:jar:8.3.0 in https://repo.maven.apache.org/maven2 was cached in the local repository, resolution will not be reattempted until the update interval of central has elapsed or updates are forced -> [Help 1] The page https://mvnrepository.com/artifact/org.apache.wicket/wicket-datetime knows only 8.0.0-M7 as the newest version. The pom.xml of the example fragements describe follow repo link: Apache Nexus https://repository.apache.org/content/repositories/snapshots/ false Where will the final versions provided? apache, maven central? Greets Daniel Am 10.03.19 um 11:06 schrieb Maxim Solodovnik: Hello Daniel, It seems project a little bit outdated :( please change wicket version here [1] to be "8.3.0" [1] https://github.com/bitstorm/Wicket-tutorial-examples/blob/master/pom.xml#L27 On Sun, 10 Mar 2019 at 16:48, kyrindorx wrote: Hey all, I tried to compile and run the Wicket examples of https://github.com/bitstorm/Wicket-tutorial-examples.git master branch. My setup is Linux, OpenJDK 11, Maven 3.5.4 The error output of the mvn install or compile command was: [ERROR] Failed to execute goal on project BindSessionExample: Could not resolve dependencies for project org.wicketTutorial:BindSessionExample:jar:1.0-SNAPSHOT: Failure to find org.apache.wicket:wicket-core:jar:8.0.0-SNAPSHOT in https://repository.apache.org/content/repositories/snapshots/ was cached in the local repository, resolution will not be reattempted until the update interval of Apache Nexus has elapsed or updates are forced -> [Help 1] Is it required to add a repository to compile the examples? Greets Daniel - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Problems with wicket examples 8.x
Hey all, I tried to compile and run the Wicket examples of https://github.com/bitstorm/Wicket-tutorial-examples.git master branch. My setup is Linux, OpenJDK 11, Maven 3.5.4 The error output of the mvn install or compile command was: [ERROR] Failed to execute goal on project BindSessionExample: Could not resolve dependencies for project org.wicketTutorial:BindSessionExample:jar:1.0-SNAPSHOT: Failure to find org.apache.wicket:wicket-core:jar:8.0.0-SNAPSHOT in https://repository.apache.org/content/repositories/snapshots/ was cached in the local repository, resolution will not be reattempted until the update interval of Apache Nexus has elapsed or updates are forced -> [Help 1] Is it required to add a repository to compile the examples? Greets Daniel - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Wicket Components
Hello everybody, I am looking for a component frame or some individual components with wicket. The Wicket examples show some simple solutions, but I want to have a collection of GUI components like Primefaces (https://www.primefaces.org/). Does anyone know such a project? I am grateful for hints and ideas :) greetings Kyrindor
Re: apache wicket 8.0 or 8.x
@Maxim: Thx :) Am 29.09.2018 um 14:13 schrieb Maxim Solodovnik: To change jquery version being used you can call getJavaScriptLibrarySettings().setJQueryReference(org.apache.wicket.resource.JQueryResourceReference.getV3()); inside you Application.init() On Sat, 29 Sep 2018 at 18:35, kyrindorx wrote: Hey all, I started with a new little webpage with Apache Wicket 8.0. I would use Bootstrap 4.0 as html grid and jquery for it. But wicket use jquery 2.2.4 as distrib version in version 8.0. So I have some questions about it: - Can I use Bootstrap 4 or better go on with 3.3.7 - JQuery 2.2.4 is outdated EOL and will not get further updates. - When will Apache Wicket shipping a new version of JQuery? Greets Kyrindor - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
apache wicket 8.0 or 8.x
Hey all, I started with a new little webpage with Apache Wicket 8.0. I would use Bootstrap 4.0 as html grid and jquery for it. But wicket use jquery 2.2.4 as distrib version in version 8.0. So I have some questions about it: - Can I use Bootstrap 4 or better go on with 3.3.7 - JQuery 2.2.4 is outdated EOL and will not get further updates. - When will Apache Wicket shipping a new version of JQuery? Greets Kyrindor - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Wicket and Spring Rest (MVC & DispatcherServlet)
Hi, I have to run a wicket app in the Servlet Context / Path "/*". I want to use Spring MVC with Rest on "/api/*". I found the WicketSessionFilter and some infos about it, but I can't see a way to delegate into the Spring DispatcherServlet with "/*" bind on the Wicket application filter. I'll thankful for some hints :) Greats Kyrindorx - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Just handle java properties files with Apache Wicket
Hi, The goal of the programm is the handling of properties files with excel and languages. The programm will create a config property file and database files into .locapp in your user home directory. * scan your project for *.properties files (cmd: f DIR) * import properties into the database (cmd: ip) * get excel with a column for each language (cmd: ee DIR) * (re)import excel file (cmd: ei path-to-file) * write it back to properties files (cmd: ep DIR) * ask for integrity between properties files (SRC) vs. excel data (XLS): (cmd: ci [LANGUAGE]) * count entries for analysing your differences between languages (cmd: pc) * find empty entries for all languages or one language with the empty flag ("1") * get single language and optional only empty values (cmd: ee DIR en 1) -> en=language; 1=empty strings - You can export all entries with all languages - You can export single language with all entries or only with empty values - You can merge entries from SRC (properties files) or XLS with versions Example: "mp XLS" will merge XLS entries with version 1 and version 2 - the higher version will win. - write back into properties with "ep DIR". The programm exports the last version of XLS entries into the know files (cmd f). If your last excel-import(ei) was a fullset or subset of entries, so you can export only this and not all known properties. Greets Kyrindor Am 26.05.2018 um 13:43 schrieb Martin Grigorov: Hi, From the project's README it is not very clear to me what your application does but it reminds me of https://github.com/pingunaut/wicketmessages-maven-plugin On Fri, May 25, 2018 at 8:13 PM, kyrindorx <kyrind...@gmail.com> wrote: Hey all, I have a idea to handle java properties files in Apache Wicket. We use this little helper in our projects, too :) So check it out and test it: https://t.co/7RNgdC6VlD Bye Kyrindor PS: It's open source (MIT License) - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Just handle java properties files with Apache Wicket
Hey all, I have a idea to handle java properties files in Apache Wicket. We use this little helper in our projects, too :) So check it out and test it: https://t.co/7RNgdC6VlD Bye Kyrindor PS: It's open source (MIT License) - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org