[ 
https://issues.apache.org/jira/browse/WICKET-6938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17452533#comment-17452533
 ] 

Alexandre commented on WICKET-6938:
-----------------------------------

[~papegaaij] Thanks for the response. right now I have no issue to trigger off 
the "enter" key of my textfield with OnEventHeaderItem.forComponent.But I'm not 
able to register the click event of the popup since the popup does not exist 
yet at page load. It is created dynamically.  I believe 
OnEventHeaderItem.forMarkupId fail for lack of div. Once the popup has shown at 
least once I can inspect I find it, but not before.

This is problematic.

Do you have a solution on how to register an event for an item that does not 
yet exist?

> wicket-autocomplete.js not CSP compliant
> ----------------------------------------
>
>                 Key: WICKET-6938
>                 URL: https://issues.apache.org/jira/browse/WICKET-6938
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket-extensions
>    Affects Versions: 9.6.0
>            Reporter: Alexandre
>            Priority: Major
>
> While upgrading from wicket 8 to 9.6 we are trying to implement CSP. We also 
> use the autocompletebehavior. This in turn call wicket-autocomplete.js 
> (wicket-extensions\src\main\java\org\apache\wicket\extensions\ajax\markup\html\autocomplete).
> This js file contains "handleSelection" function trying to "eval(attr.value)" 
> throwing a CSP 'unsafe-eval' exception.
> So the autocomplete textfield will display choices, but won't handle user 
> selection.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to