Re: Wicket Bootstrap 0.9.21 Release

2016-12-30 Thread Tobias Soloschenko
Then let's wait for 7.6.0 kind regards Tobias > Am 30.12.2016 um 18:15 schrieb Martin Grigorov : > > The issue with the fragments is only with Wicket 7.5.0+ > > On Dec 30, 2016 6:58 PM, "Tobias Soloschenko" < > tobiassolosche...@googlemail.com> wrote: > >> Hi, >> >>

Re: Fwd: Wicket Bootstrap 0.9.21 Release

2016-12-30 Thread Martin Grigorov
Hi, You can use older WB with latest Wicket. They are binary compatible. On Dec 30, 2016 5:43 PM, "john.j.cool" wrote: > Hello, > > when is the release 0.9.21 of wicket-bootstrap planned? we need it because > of the security issue in wicket prior to 6.25.0. > >

Re: Wicket Bootstrap 0.9.21 Release

2016-12-30 Thread Tobias Soloschenko
Hi, currently there is a vote for Wicket 6.26.0 to be released. I guess it would make sense to build WB with that new version and test it. @Martin - WDYT? kind regards Tobias > Am 30.12.2016 um 17:33 schrieb Ronny Pscheidl : > > Hi, > but this isn't fixing the

Re: Wicket Bootstrap 0.9.21 Release

2016-12-30 Thread Ronny Pscheidl
Hi, but this isn't fixing the issues with bootstrap components which are using wicket:fragment tag. > Am 30.12.2016 um 16:47 schrieb Martin Grigorov : > > Hi, > > You can use older WB with latest Wicket. > They are binary compatible. > >> On Dec 30, 2016 5:43 PM,

Re: Wicket Bootstrap 0.9.21 Release

2016-12-30 Thread Martin Grigorov
The issue with the fragments is only with Wicket 7.5.0+ On Dec 30, 2016 6:58 PM, "Tobias Soloschenko" < tobiassolosche...@googlemail.com> wrote: > Hi, > > currently there is a vote for Wicket 6.26.0 to be released. I guess it > would make sense to build WB with that new version and test it. > >

Fwd: Wicket Bootstrap 0.9.21 Release

2016-12-30 Thread john.j.cool
Hello, when is the release 0.9.21 of wicket-bootstrap planned? we need it because of the security issue in wicket prior to 6.25.0. john.j.cool

[ANNOUNCE] Apache Wicket 8.0.0-M3 Released

2016-12-30 Thread Andrea Del Bene
The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M3! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can

Wicket 7 + Spring Security 7

2016-12-30 Thread David Beer
Hi All I am trying to add spring security to wicket 7. I have looked at example thomberges did but that doesn't really seem to work. If I comment out the code in the SecureWebsession all still seems to authenticate somehow. Is there an up to date project anyone has of integrating spring security

[ANNOUNCE] Apache Wicket 7.6.0 Released

2016-12-30 Thread Andrea Del Bene
The Apache Wicket PMC is proud to announce Apache Wicket 7.6.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find

[ANNOUNCE] CVE-2016-6793 Apache Wicket deserialization vulnerability

2016-12-30 Thread Pedro Santos
CVE-2016-6793: Apache Wicket deserialization vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.x and 1.5.x Description: Depending on the ISerializer set in the Wicket application, it's possible that a Wicket's object deserialized from an

Re: Wicket 7 + Spring Security 7

2016-12-30 Thread Martin Grigorov
Hi David, Latest Spring Security release is 4.1.4, there is no 7.x ;-) I cannot share my project but the integration is quite simple. 1) define the Spring config (with an impl of UserDetailsService!) 2) in your login logic (MyAuthenticatedWebSession#signin() or MyLoginForm#onSubmit()) use