On Wed, Aug 12, 2009 at 7:49 PM, jluehe<[email protected]> wrote: > > As for the security concerns raised, note that configuration specified in > web.xml always takes precedence over that specified in web-fragment.xml in > case of a conflict.
if something mounts a filter on /asdasdasdasdasdasd that opens a backdoor that wouldnt cause a conflict right? not unless i have something also mapped onto that path... > In addition, by setting metadata-complete to "true" in > web.xml, any web-fragment.xml configuration will be ignored. right, which kind of defeats the entire purpose... oh well. hopefully this is just my ignorance of the spec. -igor > > Jan > > > igor.vaynberg wrote: >> >> dont think so because >> >> a) not everyone wants to name their application class >> org.glassfish.samples.WicketApplication >> b) not everyone wants to use /* mapping >> >> i havent read the spec yet but just from looking at the article this >> is a little troubling from security perspective. just because i add a >> jar to my app it can now register a servlet behind my back and create >> a backdoor into the server? >> >> -igor >> >> On Tue, Aug 11, 2009 at 5:46 AM, Arun Gupta<[email protected]> wrote: >>> I wrote a blog describing how to use Wicket with a Servlet 3.0/Java EE >>> 6 container: >>> >>> http://blogs.sun.com/arungupta/entry/totd_91_applying_java_ee >>> >>> Any chance the changes can be integrated in the wicket-*.jar ? >>> >>> -Arun >>> >>> -- >>> Need Application Server ? - Download glassfish.org >>> Blog: http://blogs.sun.com/arungupta >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: [email protected] >>> For additional commands, e-mail: [email protected] >>> >>> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> >> >> > > -- > View this message in context: > http://www.nabble.com/Using-Wicket-in-a-Java-EE-6-container-tp24916920p24945876.html > Sent from the Wicket - User mailing list archive at Nabble.com. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
