Ok. I see commit

62d6e9302ce5b7f9e82b73177afbffc3a18d31b1

Added JS sanitazing and and fix for PackageResource

Question. Shouldn't we create ISSUE for such things and add ISSUE
number to commit? SO, that the ISSUE is reported on release and it is
clear that this is a security fix, requiring us to warn users they
should upgrade?


On Wed, May 6, 2026 at 1:24 PM Ernesto Reinaldo Barreiro <[email protected]>
wrote:

> Hi,
>
> In https://www.openwall.com/lists/oss-security/2026/05/06/2 it is stated
> that this was fixed for wicket 10.9.0... but I can't find the corresponding
> ISSUE
>
> --
> Regards -
> Ernesto Reinaldo Barreiro
> Apache Wicket Committer
>


-- 
Regards -
Ernesto Reinaldo Barreiro
Apache Wicket Committer

Reply via email to