[
https://issues.apache.org/jira/browse/WICKET-280?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12472794
]
Eelco Hillenius commented on WICKET-280:
----------------------------------------
I actually don't care much about protecting HTML. Due to the fact that we don't
have any logic in the templates anyway, having them accessible wouldn't
compromise security by default. And after all it can be configured.
> [Patch] Allow to access html resources if they are not associated with a java
> class
> -----------------------------------------------------------------------------------
>
> Key: WICKET-280
> URL: https://issues.apache.org/jira/browse/WICKET-280
> Project: Wicket
> Issue Type: Improvement
> Reporter: vincent Demay
> Fix For: 1.3
>
> Attachments: PackageResourceGuard.patch
>
>
> Html files can be used as static resources but in Wicket1.X they are not
> accessible because PackageResourceGuard blocks html extension files. I
> understand for "application" html files (associated with a java class) but
> not for ohers. The attachement allow "non-application html file" to be used
> as resources
> I also saw In trunk html files can be used as "static" resources.
> why all html files? Why in trunk?
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
