<security-constraint>
<web-resource-collection>
<web-resource-name>WicketPage</web-resource-name>
<url-pattern>/app/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
this will cause, /app* which including /app/resources/* are all forced to go https.
(the browser does not cache url via https protocol...)
My requirement is all pages required high security, but .gif, .js, and .css don't.
Is there any suggestion to configure SSL for all of wicket "page" but not including other resources ?
On 7/15/06, Ingram Chen <
[EMAIL PROTECTED]> wrote:
It is hard to describe my question clearly...
I notice that if I use resource such as _javascript_Reference or PackageResourceReference,
the browser won't cache these resources and always send request to server. My page has losts of
.gif, .js, .css in package and it causes a lot of overhead. I guess there is somewhere in wicket to set header
like no-cache, no-store for these resource... Is this behavior intensional ? How do I turn off this ?
(It's better that I can turn off this globally)
--
Ingram Chen
Java [EMAIL PROTECTED]
Institue of BioMedical Sciences Academia Sinica Taiwan
blog: http://www.javaworld.com.tw/roller/page/ingramchen
--
Ingram Chen
Java [EMAIL PROTECTED]
Institue of BioMedical Sciences Academia Sinica Taiwan
blog: http://www.javaworld.com.tw/roller/page/ingramchen
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Wicket-user mailing list Wicket-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wicket-user
