The CSP example works fine.
Do you have Wicket 9.0 and 9.1 on your classpath?
Sven
On 03.10.20 08:13, Maxim Solodovnik wrote:
Hello Sven,
I was aware of this JIRA
and have double-check with debugger:
in `WebApplication.validateInit()`
`getCspSettings().isEnabled() == true`
and `getCspSettings().enforce(this);` was called ....
On Sat, 3 Oct 2020 at 13:10, Sven Meier <s...@meiers.net> wrote:
Hi,
could be https://issues.apache.org/jira/browse/WICKET-6821
Do you configure your CSP in #init()?
Sven
Am 3. Oktober 2020 06:18:21 MESZ schrieb Maxim Solodovnik <
solomax...@gmail.com>:
sorry for double posting,
here are the first results: CSPNonceHeaderResponseDecorator was set up,
but
breakpoint in it's `render` method wasn't hit
something weird ....
On Sat, 3 Oct 2020 at 08:47, Maxim Solodovnik <solomax...@gmail.com>
wrote:
Hello All,
I have started testing this new release yesterday
Checksum and signature as well as local build from sources are OK
BUT my main application is not working at all due to zero resources
are
loaded due to CSP errors
(we do have CSP rules in charge and CSP enabled)
Everything works as expected in Wicket 9.0.0
Are there any migration guides or something like this?
Advise on where should I start digging is highly appreciated
p.s. I should test SNAPSHOTs earlier :(((
On Sat, 3 Oct 2020 at 02:48, Andrea Del Bene <an.delb...@gmail.com>
wrote:
This is a vote to release Apache Wicket 9.1.0
Please download the source distributions found in our staging area
linked below.
I have included the signatures for both the source archives. This
vote
lasts for 72 hours minimum.
[ ] Yes, release Apache Wicket 9.1.0
[ ] No, don't release Apache Wicket 9.1.0, because ...
Distributions, changelog, keys and signatures can be found at:
https://dist.apache.org/repos/dist/dev/wicket/9.1.0
Staging repository:
https://repository.apache.org/content/repositories/orgapachewicket-1153/
The binaries are available in the above link, as are a staging
repository for Maven. Typically the vote is on the source, but
should
you find a problem with one of the binaries, please let me know, I
can
re-roll them some way or the other.
Staging git repository data:
Repository: g...@github.com:bitstorm/wicket.git
Branch: build/wicket-9.1.0
Release tag: rel/wicket-9.1.0
========================================================================
The signatures for the source release artefacts:
Signature for apache-wicket-9.1.0.zip:
-----BEGIN PGP SIGNATURE-----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=pBMm
-----END PGP SIGNATURE-----
Signature for apache-wicket-9.1.0.tar.gz:
-----BEGIN PGP SIGNATURE-----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=Hoxj
-----END PGP SIGNATURE-----
========================================================================
CHANGELOG for 9.1.0:
** Bug
* [WICKET-6702] - AsynchronousPageStore with
NotDetachedModelChecker - "Not detached model found" exception on
several fast sequential Ajax calls
* [WICKET-6802] - FilePageStore writing to
UserDefinedFileAttributeView might be null
* [WICKET-6803] - wicket-objectsizeof-agent has no valid
automatic
module name
* [WICKET-6806] - CSP header response decorator breaks
JavaScriptFilteredIntoFooterHeaderResponse
* [WICKET-6808] - Cannot add page to AjaxRequestTarget
* [WICKET-6810] - Asynchronous+encrypted pagestore leads to
WicketRuntimeException
* [WICKET-6813] - Setting child-src does not update frame-src
after
initial assignment
* [WICKET-6818] - NPE in WicketEndpoint onClose
* [WICKET-6822] - AsynchronousPageStore Potential Memory Leak
* [WICKET-6825] - wicket-ioc 9.0.0 throws IAE with JDK14, still
includes outdated ASM 7.1.0 in cglib-nodep
* [WICKET-6837] - Jupiter engine transitively included in war
file
** New Feature
* [WICKET-6805] - Add Cross-Origin Opener Policy and
Cross-Origin
Embedder Policy support
** Improvement
* [WICKET-6786] - CsrfPreventionRequestCycleListener should
support
Fetch Metadata Request Headers
* [WICKET-6807] - Fake Submitting Button
* [WICKET-6821] - Completely disable CSP support
* [WICKET-6824] - Use concatenation instead of String.format
for
frequently called methods
* [WICKET-6826] - Improve performance and reduce allocations
for
Behaviors
* [WICKET-6827] - Improve performance of Strings.join and
Strings.replaceAll
* [WICKET-6828] - Wrong tree branch icon with hidden children
* [WICKET-6829] - Use String.isEmpty() instead of
"".equals(...)
* [WICKET-6830] - Convert Behaviors into a static utility class
to
reduce allocations
* [WICKET-6831] - Try to flush the response before detach
* [WICKET-6833] - Reduce allocations when merging page
parameters
* [WICKET-6835] - Improve performance of
AbstractMapper.getPlaceholder
* [WICKET-6838] - Improve performance of Strings.split
--
Best regards,
Maxim
--
Best regards,
Maxim
