Hi,

I always thought
that org.apache.wicket.settings.SecuritySettings#getEnforceMounts() is for
this. Also its javadoc seems to say that.
But there were some changes to its behavior after which I am no more sure
what exactly it does :-/

Martin Grigorov
Wicket Training and Consulting
https://twitter.com/mtgrigorov

On Tue, May 3, 2016 at 8:53 AM, Илья Нарыжный <[email protected]> wrote:

> Yea - that's possible. Even instrumentation is possible, but probably
> this problem somehow solved already in wicket. I would briefly
> summarize the problem like:
>
> Wicket allow to directly address bookmarkable pages from 3rd party
> libraries without good way to manage accessibility.
> Potentially it means that with having control over some 3rd partly lib
> it's possible to include "backdoor page"
> Thanks,
>
> Ilia
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to