What is the security issue of having org.apache.wicket in your url?

Martijn

On Tue, Nov 18, 2008 at 10:51 PM, ak <[EMAIL PROTECTED]> wrote:
>
> Hello,
>
> I have IIS forwarding request to weblogic 10.3 where my wicket-app resides.
> We had tough time figuring out why our app wouldn't run as expected when it
> is served from IIS. Ajax, js and css failed to load properly. After
> strenuous analysis, looks like the problem was with not allowing multiple
> dots on the URL string. One of the many request that failed had URL such as
> this:
>
> /app/resources/org.apache.wicket.ajax.WicketAjaxReference/wicket-ajax.js
>
> Basically, all the shared resources URL for fetching the CSS and JS were
> failed. One solution was to disable a security feature that allows multiple
> dots on the URL string. But I am not sure how well this would go with our
> server admin's.
>
> Can you advice if there are other prefered ways to get the shared resources
> working without the reference having package path on the URL's ?
>
> Thanks,
> Andy
>
> --
> View this message in context: 
> http://www.nabble.com/resource-mapping-and-dot-in-url-tp20569065p20569065.html
> Sent from the Wicket - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>



-- 
Become a Wicket expert, learn from the best: http://wicketinaction.com
Apache Wicket 1.3.4 is released
Get it now: http://www.apache.org/dyn/closer.cgi/wicket/1.3.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to