Examples of org.apache.wicket.markup.html.SecurePackageResourceGuard

org.apache.wicket.markup.html.SecurePackageResourceGuard

This is a resource guard which by default denies access to all resources and thus is more secure.

All pattern are executed in the order they were provided. All pattern are executed to determine if access can be granted or not.

Note that access to the config data such as get/setPattern() and acceptXXX() is not synchronized. It is assumed that configuration has finished before the first request gets executed.

The rules are fairly simple. Each pattern must start with either "+" (include) or "-" (exclude). "*" is a placeholder for zero, one or more characters within a file or directory name. "**" is a placeholder for zero, one or more sub-directories.

Examples:

+*.gif	All gif files in all directories
+test.	All files in all directories starting with "test"
+mydir//.gif	All gif files two levels below the mydir directory. E.g. mydir/dir2/test.gif
+mydir/*/.gif	All gif files in all directories below mydir. E.g. mydir/test.gif or mydir/dir2/dir3/test.gif

@see IPackageResourceGuard @see org.apache.wicket.settings.ResourceSettings#getPackageResourceGuard @see PackageResourceGuard @author Juergen Donnerstag

    });


    IPackageResourceGuard guard = getResourceSettings().getPackageResourceGuard();
    if (guard instanceof SecurePackageResourceGuard)
    {
      SecurePackageResourceGuard secureGuard = (SecurePackageResourceGuard) guard;
      secureGuard.addPattern("+org/apache/wicket/merged-resources");
    }
  }

View Full Code Here

      @Override
      protected void init()
      {
        super.init();


        SecurePackageResourceGuard guard = (SecurePackageResourceGuard) getResourceSettings().getPackageResourceGuard();
        guard.addPattern("+*.less");
      }


      /**
       * Register custom ResourceReferenceRegistry that creates LessResourceReference
       * for requests with .less extension

View Full Code Here

      @Override
      protected void init()
      {
        super.init();


        SecurePackageResourceGuard guard = (SecurePackageResourceGuard) getResourceSettings().getPackageResourceGuard();
        guard.addPattern("+*.less");
      }


      /**
       * Register custom ResourceReferenceRegistry that creates LessResourceReference
       * for requests with .less extension

View Full Code Here

      @Override
      protected void init()
      {
        super.init();


        SecurePackageResourceGuard guard = (SecurePackageResourceGuard) getResourceSettings().getPackageResourceGuard();
        guard.addPattern("+*.less");
      }


      /**
       * Register custom ResourceReferenceRegistry that creates LessResourceReference
       * for requests with .less extension

View Full Code Here

      @Override
      protected void init()
      {
        super.init();


        SecurePackageResourceGuard guard = (SecurePackageResourceGuard) getResourceSettings().getPackageResourceGuard();
        guard.addPattern("+*.less");
      }


      /**
       * Register custom ResourceReferenceRegistry that creates LessResourceReference
       * for requests with .less extension

View Full Code Here

      @Override
      protected void init()
      {
        super.init();


        SecurePackageResourceGuard guard = (SecurePackageResourceGuard) getResourceSettings().getPackageResourceGuard();
        guard.addPattern("+*.less");
      }
    };
  }

View Full Code Here

  {
    getDebugSettings().setDevelopmentUtilitiesEnabled(true);
    IPackageResourceGuard packageResourceGuard = getResourceSettings().getPackageResourceGuard();
    if (packageResourceGuard instanceof SecurePackageResourceGuard)
    {
      SecurePackageResourceGuard guard = (SecurePackageResourceGuard) packageResourceGuard;
      // allow velocity macros resources
      guard.addPattern("+*.vm");
    }


    // initialize velocity
    try
    {

View Full Code Here

        LessCacheManager cacheManager = new LessCacheManager();
        cacheManager.install(app);


        IPackageResourceGuard resourceGuard = app.getResourceSettings().getPackageResourceGuard();
        if (resourceGuard instanceof SecurePackageResourceGuard) {
            SecurePackageResourceGuard securePackageResourceGuard = (SecurePackageResourceGuard) resourceGuard;
            securePackageResourceGuard.addPattern("+*.less");
        }


        ResourceReferenceRegistry resourceReferenceRegistry = app.getResourceReferenceRegistry();
        IResourceReferenceFactory delegate = resourceReferenceRegistry.getResourceReferenceFactory();
        resourceReferenceRegistry.setResourceReferenceFactory(new LessResourceReferenceFactory(delegate));

View Full Code Here

     */
    private static void updateSecurityManager(final Application app) {
        final IPackageResourceGuard packageResourceGuard = app.getResourceSettings().getPackageResourceGuard();


        if (packageResourceGuard instanceof SecurePackageResourceGuard) {
            SecurePackageResourceGuard guard = (SecurePackageResourceGuard) packageResourceGuard;
            guard.addPattern("+*.woff");
            guard.addPattern("+*.eot");
            guard.addPattern("+*.svg");
            guard.addPattern("+*.ttf");
            guard.addPattern("+*.css.map");
        }
    }

View Full Code Here

    });


    IPackageResourceGuard guard = getResourceSettings().getPackageResourceGuard();
    if (guard instanceof SecurePackageResourceGuard)
    {
      SecurePackageResourceGuard secureGuard = (SecurePackageResourceGuard) guard;
      secureGuard.addPattern("+org/apache/wicket/merged-resources");
    }
  }

View Full Code Here

0 1

TOP

Related Classes of org.apache.wicket.markup.html.SecurePackageResourceGuard

de.agilecoders.wicket.core.Bootstrap

de.agilecoders.wicket.less.BootstrapLess

org.apache.wicket.examples.resourcedecoration.ResourceDecorationApplication

org.apache.wicket.examples.velocity.VelocityTemplateApplication

org.apache.wicket.request.resource.LessResourceReferenceTest

org.cyclop.web.webapp.WicketWebApplication

org.wicketstuff.jquery.demo.DemoApplication

wicket.contrib.tinymce.TinyMceInitializer

wicket.contrib.tinymce4.TinyMceInitializer

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.