Re: Implementing a SecureForm to avoid CSRF attacks

2014-06-11 Thread shayy
The specific panel *inside* the form is getting updated during each AJAX request, the form itself stays the same. -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Implementing-a-SecureForm-to-avoid-CSRF-attacks-tp4666175p4666187.html Sent from the Users forum mailing

Re: Implementing a SecureForm to avoid CSRF attacks

2014-06-11 Thread shayy
Unless I'm doing it wrong, I can't get it to work :( I'm posting my class here maybe someone can see my mistake? public class SecureFormT extends FormT { private static final Logger log = LoggerFactory.getLogger(SecureForm.class); private static final String TOKEN_NAME =

Re: Implementing a SecureForm to avoid CSRF attacks

2014-06-11 Thread shayy
Hmm, not sure about that. Do you mean that onEvent() will both re-generate the token on the SecureForm class as well as replace the value on the HTML? Security wise, is there a reason to do that? -- View this message in context:

Re: Implementing a SecureForm to avoid CSRF attacks

2014-06-11 Thread shayy
So first let me just say that your answer helped me and everything works now, I really appreciate the help! So the scenario is that I have a form, inside the form there are several tabs. When the user enters the first tab, the form is first rendered with the token and the SecureForm class has the

Implementing a SecureForm to avoid CSRF attacks

2014-06-10 Thread shayy
I'm trying to implement a SecureForm (extends Form) which dynamically adds a hidden field to prevent CSRF attacks as described here: http://apache-wicket.1842946.n4.nabble.com/Security-Features-offered-by-Wicket-td1861659.html My problem is that my form contains a panel with tabs, each tab

Re: Problems with requests to MountPath and optional parameters

2012-01-24 Thread shayy
Although I must use the + since it's in my code logic, I've tried it without it and it still fails. Any suggestions? Thanks. -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Problems-with-requests-to-MountPath-and-optional-parameters-tp4323095p4323572.html Sent from

Problems with requests to MountPath and optional parameters

2012-01-23 Thread shayy
Hi, I'm trying to use @MountPath in conjunction with Wicket 1.5 but I'm encountering an issue. I've configured the following mount path on one of my page classes: @MountPath(/items/#{itemName}/#{itemNumber}/#{itemDate}/#{subItemName}) Requesting the following URL results in a 404 when using