This is an automated email from the ASF dual-hosted git repository.
dashorst pushed a change to branch wicket-9.x
in repository https://gitbox.apache.org/repos/asf/wicket.git
from 3b4d7db35d Port build-versions.py to Python 3 and read its modules
from the poms
new f4e33177ef Escape the backslash in JavaScriptUtils#escapeQuotes
new 48925faea0 Ask IAuthorizationStrategy about a resource served by a
component
new ea7aeac7d9 Take upload details of FileUploadToResourceField from the
stored files
new e8afa98e4c Only turn http, https and ftp URLs into links in
DefaultLinkParser
new d622df5552 Escape the window name in AjaxNewWindowNotifyingBehavior
new 08fb8f956b Re-evaluate the RENDER authorization on a freshly created
page
new 04241d4d18 Judge a resumed destination on the origin that chose it
new 9a61127b27 Ask the package resource guard about the resource that was
located
new e0808c7586 Renew the session id on every sign in
new 5c415ae4d5 Ask IAuthorizationStrategy about the WebSocketResource a
client connects to
new 911bb56ef2 Resolve a WebSocket message against the live HTTP session,
not a copy of it
new aaa7c6bb61 Pass a client message to a WebSocketBehavior only where the
client may invoke it
new 713f77aa9c Sign file upload resource constraints
new 813bc244ba Sign the upload settings with an HMAC instead of the
configured crypt
new d9c65f4540 Move the popup target escaping from PopupSettings to the
links
new cc69731d21 Restrict the characters a component id and a markup id may
contain
new 78f068efa1 Escape the starting text of the upload progress bar
new e43148e5b1 Escape the css class the filter form writes into its hidden
fields
new 8faf9122b2 Say in the javadoc that a listener url is written into the
script as it stands
new 681b820959 Pin the JavaScript a markup id is written into
new 0e3d07035e Keep the upload progress bar instance in a map keyed by the
markup id
new 0d6837246e Reject '&' in a component id and a markup id
new 0715409afb Allow brackets and parentheses in a component id
new 215fdc43d5 Escape the css class the form writes into its hidden fields
new 946ab8615c Escape what the default button field writes into its
attributes
new 63f109cb71 Ask the class loaders that can see the application for the
markup's class
new 42ea26d269 Added CHANGELOG for release 9.25.0
new 09902db49a avoid removig repo postfix
The 28 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
CHANGELOG-9.x | 15 +
release.sh | 2 +-
.../authentication/AuthenticatedWebSession.java | 12 +-
.../role/annotations/AuthorizeResource.java | 6 +
.../authentication/SignInSessionIdTest.java | 182 ++++++++
.../annotations/AnnotationsRoleResourceTest.java | 220 +++++++++
.../MetaDataRoleFreshPageListenerTest.java | 192 ++++++++
.../src/main/java/org/apache/wicket/Component.java | 104 ++++-
.../apache/wicket/DefaultMarkupIdGenerator.java | 5 +
.../java/org/apache/wicket/IMarkupIdGenerator.java | 7 +
.../RestartResponseAtInterceptPageException.java | 70 ++-
.../ajax/AjaxNewWindowNotifyingBehavior.java | 10 +-
.../authorization/IAuthorizationStrategy.java | 24 +-
.../request/handler/ListenerRequestHandler.java | 64 ++-
.../wicket/core/util/string/JavaScriptUtils.java | 39 +-
.../wicket/markup/html/PackageResourceGuard.java | 46 +-
.../org/apache/wicket/markup/html/form/Form.java | 12 +-
.../html/form/upload/MultiFileUploadField.java | 4 +-
.../resource/AbstractFileUploadResource.java | 127 +++++-
.../upload/resource/FileUploadToResourceField.java | 137 ++++--
.../upload/resource/FileUploadToResourceField.js | 9 +-
.../image/resource/LocalizedImageResource.java | 28 +-
.../wicket/markup/html/link/ExternalLink.java | 6 +-
.../org/apache/wicket/markup/html/link/Link.java | 6 +-
.../wicket/markup/html/link/PopupSettings.java | 17 +-
.../wicket/markup/html/link/ResourceLink.java | 30 +-
.../ResourceIsolationRequestCycleListener.java | 216 ++++++++-
.../request/component/IRequestableComponent.java | 14 +-
.../apache/wicket/request/resource/IResource.java | 10 +-
.../wicket/request/resource/PackageResource.java | 187 +++++++-
.../org/apache/wicket/settings/PageSettings.java | 9 +-
.../apache/wicket/ComponentIdCharactersTest.java | 232 ++++++++++
.../wicket/MarkupIdInGeneratedJavaScriptTest.java | 100 +++++
.../ajax/AjaxNewWindowNotifyingBehaviorTest.java | 140 ++++++
.../request/handler/ListenerOnFreshPageTest.java | 463 +++++++++++++++++++
.../ComponentResourceAuthorizationTest.java | 489 +++++++++++++++++++++
.../core/util/string/JavaScriptUtilsTest.java | 18 +-
.../PackageResourceGuardForeignLoaderTest.java | 231 ++++++++++
.../wicket/markup/html/PackageResourceTest.java | 152 +++++++
.../apache/wicket/markup/html/ReportPanel_nl.html | 3 +
...ithAjaxUpdatePanel.java => ReportPanel_nl.java} | 12 +-
.../apache/wicket/markup/html/ReportPanel_v2.html | 3 +
...ithAjaxUpdatePanel.java => ReportPanel_v2.java} | 14 +-
.../wicket/markup/html/ReportPanel_v2_ja.html | 3 +
...nkTest.java => FormDefaultButtonFieldTest.java} | 64 +--
...TextAreaTest.java => FormHiddenFieldsTest.java} | 59 +--
.../html/form/upload/MultiFileUploadFieldTest.java | 34 ++
...loadToResourceFieldSecurityTest$UploadPage.html | 3 +-
.../FileUploadToResourceFieldSecurityTest.java | 321 ++++++++++++++
.../PopupSettingsTest.java} | 36 +-
.../wicket/markup/html/nonComponent_snippet.html | 1 +
.../http/intercept/HomePage.html} | 4 +-
.../http/intercept/HomePage.java} | 7 +-
.../http/intercept/InterceptedSession.java} | 29 +-
.../wicket/protocol/http/intercept/LoginPage.html | 5 +
.../http/intercept/LoginPage.java} | 24 +-
.../intercept/ResumedDestinationIsolationTest.java | 424 ++++++++++++++++++
.../protocol/http/intercept/SecureFormPage.html | 5 +
.../http/intercept/SecureFormPage.java} | 108 ++---
.../protocol/http/intercept/SecureLinkPage.html | 5 +
.../http/intercept/SecureLinkPage.java} | 16 +-
.../protocol/http/intercept/SecureRenderPage.html | 3 +
.../protocol/http/intercept/SecureRenderPage.java} | 55 ++-
.../extensions/ajax/AjaxDownloadBehavior.java | 24 +-
.../markup/html/form/upload/UploadProgressBar.java | 5 +-
.../ajax/markup/html/form/upload/progressbar.js | 1 +
.../ajax/markup/html/modal/TrapFocusBehavior.java | 4 +-
.../markup/html/basic/DefaultLinkParser.java | 28 +-
.../markup/html/basic/SmartLinkLabel.java | 3 +-
.../markup/html/basic/SmartLinkMultiLineLabel.java | 3 +-
.../repeater/data/table/filter/FilterForm.java | 2 +-
.../AjaxDownloadResourceAuthorizationTest.java | 265 +++++++++++
.../AjaxEditableLabelErrorMessageEscapeTest.java | 78 ++++
.../html/form/upload/UploadProgressBarTest.java | 133 ++++++
.../markup/html/modal/TrapFocusBehaviorTest.java | 75 ++--
.../markup/html/repeater/AjaxListPanelTest.java | 55 +++
.../markup/html/basic/DefaultLinkParserTest.java | 64 +++
.../markup/html/basic/SmartLinkLabelTest.java | 104 +++++
.../ExportToolbarResourceAuthorizationTest.java | 155 +++++++
.../repeater/data/table/filter/FilterFormTest.java | 37 ++
.../wicket-native-websocket-core/pom.xml | 5 +
.../wicket/protocol/ws/WebSocketSettings.java | 9 +
.../ws/api/AbstractWebSocketProcessor.java | 94 ++++
.../wicket/protocol/ws/api/HttpSessionCopy.java | 7 +
.../wicket/protocol/ws/api/ServletRequestCopy.java | 37 +-
.../wicket/protocol/ws/api/WebSocketBehavior.java | 65 ++-
.../wicket/protocol/ws/api/WebSocketResource.java | 29 ++
.../ws/util/tester/TestWebSocketConnection.java | 20 +
.../ws/util/tester/TestWebSocketProcessor.java | 17 +-
.../protocol/ws/util/tester/WebSocketTester.java | 31 +-
.../ws/api/ServletRequestCopySessionTest.java | 92 ++++
.../AnnotationsRoleWebSocketResourceTest.java | 200 +++++++++
.../ws/util/tester/TestWebSocketResource.java | 21 +
.../WebSocketBehaviorCanCallListenerTest.java | 281 ++++++++++++
.../tester/WebSocketResourceAuthorizationTest.java | 291 ++++++++++++
.../util/tester/WebSocketSessionLifetimeTest.java | 368 ++++++++++++++++
.../util/tester/WebSocketTesterProcessorTest.java | 2 +-
.../util/tester/WebSocketTesterResourceTest.java | 3 +-
.../nativewebsockets/nativewebsockets_2.adoc | 6 +
.../nativewebsockets/nativewebsockets_5.adoc | 3 +
.../src/main/asciidoc/security/security_5.adoc | 2 +
101 files changed, 7069 insertions(+), 423 deletions(-)
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authentication/SignInSessionIdTest.java
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authorization/strategies/role/annotations/AnnotationsRoleResourceTest.java
create mode 100644
wicket-auth-roles/src/test/java/org/apache/wicket/authroles/authorization/strategies/role/metadata/MetaDataRoleFreshPageListenerTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/ComponentIdCharactersTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/MarkupIdInGeneratedJavaScriptTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/ajax/AjaxNewWindowNotifyingBehaviorTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/core/request/handler/ListenerOnFreshPageTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/core/request/handler/resource/ComponentResourceAuthorizationTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/markup/html/PackageResourceGuardForeignLoaderTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/markup/html/ReportPanel_nl.html
copy
wicket-core/src/test/java/org/apache/wicket/markup/html/{TransparentWithAjaxUpdatePanel.java
=> ReportPanel_nl.java} (77%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/markup/html/ReportPanel_v2.html
copy
wicket-core/src/test/java/org/apache/wicket/markup/html/{TransparentWithAjaxUpdatePanel.java
=> ReportPanel_v2.java} (69%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/markup/html/ReportPanel_v2_ja.html
copy
wicket-core/src/test/java/org/apache/wicket/markup/html/form/{SubmitLinkTest.java
=> FormDefaultButtonFieldTest.java} (52%)
copy
wicket-core/src/test/java/org/apache/wicket/markup/html/form/{TextAreaTest.java
=> FormHiddenFieldsTest.java} (56%)
copy
testing/wicket-threadtest/src/main/java/org/apache/wicket/threadtest/apps/app2/Home.html
=>
wicket-core/src/test/java/org/apache/wicket/markup/html/form/upload/resource/FileUploadToResourceFieldSecurityTest$UploadPage.html
(91%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/markup/html/form/upload/resource/FileUploadToResourceFieldSecurityTest.java
copy
wicket-core/src/test/java/org/apache/wicket/markup/html/{basic/SimpleResponsePageClassTest.java
=> link/PopupSettingsTest.java} (57%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/markup/html/nonComponent_snippet.html
copy
wicket-core/src/test/java/org/apache/wicket/{markup/html/basic/SimplePageExpectedResult_10.html
=> protocol/http/intercept/HomePage.html} (60%)
copy wicket-core/src/test/java/org/apache/wicket/{DisabledComponentPage2.java
=> protocol/http/intercept/HomePage.java} (87%)
copy wicket-core/src/test/java/org/apache/wicket/{intercept/MySession.java =>
protocol/http/intercept/InterceptedSession.java} (69%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/protocol/http/intercept/LoginPage.html
copy
wicket-core/src/test/java/org/apache/wicket/{stateless/StatelessPageWithForm.java
=> protocol/http/intercept/LoginPage.java} (70%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/protocol/http/intercept/ResumedDestinationIsolationTest.java
create mode 100644
wicket-core/src/test/java/org/apache/wicket/protocol/http/intercept/SecureFormPage.html
copy
wicket-core/src/test/java/org/apache/wicket/{markup/html/form/feedback/FeedbackFormPage.java
=> protocol/http/intercept/SecureFormPage.java} (67%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/protocol/http/intercept/SecureLinkPage.html
copy
wicket-core/src/test/java/org/apache/wicket/{stateless/StatelessComponentPage.java
=> protocol/http/intercept/SecureLinkPage.java} (77%)
create mode 100644
wicket-core/src/test/java/org/apache/wicket/protocol/http/intercept/SecureRenderPage.html
copy wicket-core/src/{main/java/org/apache/wicket/mock/MockHomePage.java =>
test/java/org/apache/wicket/protocol/http/intercept/SecureRenderPage.java} (86%)
mode change 100755 => 100644
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/AjaxDownloadResourceAuthorizationTest.java
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/markup/html/AjaxEditableLabelErrorMessageEscapeTest.java
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/markup/html/form/upload/UploadProgressBarTest.java
copy
wicket-core/src/test/java/org/apache/wicket/core/util/tester/WicketTesterSessionInvalidateTest.java
=>
wicket-extensions/src/test/java/org/apache/wicket/extensions/ajax/markup/html/modal/TrapFocusBehaviorTest.java
(50%)
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/markup/html/basic/SmartLinkLabelTest.java
create mode 100644
wicket-extensions/src/test/java/org/apache/wicket/extensions/markup/html/repeater/data/table/export/ExportToolbarResourceAuthorizationTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-core/src/test/java/org/apache/wicket/protocol/ws/api/ServletRequestCopySessionTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-core/src/test/java/org/apache/wicket/protocol/ws/util/tester/AnnotationsRoleWebSocketResourceTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-core/src/test/java/org/apache/wicket/protocol/ws/util/tester/WebSocketBehaviorCanCallListenerTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-core/src/test/java/org/apache/wicket/protocol/ws/util/tester/WebSocketResourceAuthorizationTest.java
create mode 100644
wicket-native-websocket/wicket-native-websocket-core/src/test/java/org/apache/wicket/protocol/ws/util/tester/WebSocketSessionLifetimeTest.java
