This is an automated email from the ASF dual-hosted git repository.
papegaaij pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/wicket.git
from 70b3d8dc57 Bump ip-address from 10.2.0 to 10.4.0 in
/testing/wicket-js-tests (#1534)
add fa7ab44dde Document the security model and page store crypter trust
add 1f7aad3cc0 Document cross-origin isolation of listener invocations
add e10b00f2f7 Update security reporting instructions in SECURITY.md
new c1f037524d Merge pull request #1535 from apache/document-security-model
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
SECURITY.md | 210 +++++++++++++++++++++
.../wicket/pageStore/crypt/DefaultCrypter.java | 16 +-
.../wicket/pageStore/crypt/GCMSIVCrypter.java | 17 +-
.../apache/wicket/pageStore/crypt/ICrypter.java | 13 ++
.../apache/wicket/protocol/https/HttpsMapper.java | 18 +-
.../org/apache/wicket/settings/StoreSettings.java | 9 +-
.../src/main/asciidoc/internals/pagestoring.adoc | 19 +-
.../src/main/asciidoc/security/security_3.adoc | 15 ++
8 files changed, 308 insertions(+), 9 deletions(-)
create mode 100644 SECURITY.md
