17krishna8 opened a new pull request, #1674:
URL: https://github.com/apache/wicket/pull/1674

   The `pageId` parameter of the websocket handshake was passed to 
`Integer.parseInt()` without a guard, so a connection request for page `NaN` 
failed with `NumberFormatException` while the handshake was still being set up. 
The parameter is plain request input, every client that can open the handshake 
can send such a value.
   
   A `pageId` that cannot be parsed is now treated like a missing one: the 
processor starts with `NO_PAGE_ID`, no page is found for the connection and it 
ends up rejected, instead of taking the request down with an exception.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to