Hello,

currently we've got a problem with faked ajax requests.these ajax requests misses some parameters, but the wicket-ajax header flag is set. So ServletWebRequest throws an exception:

java.lang.IllegalStateException: Current ajax request is missing the base url 
header or parameter
        at org.apache.wicket.util.lang.Checks.notNull(Checks.java:38)
        at 
org.apache.wicket.protocol.http.servlet.ServletWebRequest.getClientUrl(ServletWebRequest.java:171)
        at org.apache.wicket.request.UrlRenderer.<init>(UrlRenderer.java:59)


These faked requests are so massive, that our application is no longer monitorable. Our workaround rejects these requests via apache config. Because this is a common problem, we hope that this issue will be managed by wicket.


Best regards,

Jan

Reply via email to