tag:old.nabble.com,2006:forum-302 2009-11-09T14:12:52Z Tapestry is a powerful, open-source, all-Java framework for creating leading edge web applications in Java. Jakarta Tapestry home is <a href="http://jakarta.apache.org/tapestry/" target="_top" rel="nofollow">here</a>. tag:old.nabble.com,2006:post-26274666 2009-11-09T14:12:52Z 2009-11-09T14:12:52Z sodium Hi Dmitry, <br><br>Thanks for sharing. I tried integrating the Spring in it but it keep spitting out all sorts of errors when its constructing the bean from the applicationContext.xml. Can u share how u integrate Spring in it? I noticed that u r using the Spring 3.x instead. <br><br>I tried integrate with TapestrySpringFilter and it seems to be using Spring 2.5.6. So i decided to change your applicationContext.xml schema to 2.5 instead. <br><br>Here's my <b>web.xml</b><br>&lt;!-- <br>&nbsp; &nbsp; &lt;filter&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;filter-name&gt;app&lt;/filter-name&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;filter-class&gt;org.apache.tapestry5.TapestryFilter&lt;/filter-class&gt; <br>&nbsp; &nbsp; &lt;/filter&gt; <br>&nbsp; &nbsp; --&gt; <br>&lt;filter&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;filter-name&gt;app&lt;/filter-name&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;filter-class&gt;org.apache.tapestry5.spring.TapestrySpringFilter&lt;/filter-class&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;/filter&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;context-param&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;param-name&gt;contextConfigLocation&lt;/param-name&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;param-value&gt;/WEB-INF/applicationContext.xml&lt;/param-value&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;/context-param&gt; <br><br>Here's my maven build to include more dependencies from your given applicationContext.xml <br><br>&lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.apache.tapestry&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;tapestry-spring&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;${tapestry-release-version}&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.springframework&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;spring-jdbc&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;2.5.6&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.springframework&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;spring-orm&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;2.5.6&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.springframework&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;spring-aspects&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;2.5.6&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.springframework&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;spring-tx&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;2.5.6&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.springframework&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;spring-aop&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;2.5.6&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br><br>Am i missing out something here? I tried using Tapestry 5.1.0.5 and also the 5.2 built from trunk. <br><br>Here's the <b>error</b>: <br><br>[INFO] ioc.RegistryBuilder Adding module definition for class org.apache.tapestry5.ioc.services.TapestryIOCModule <br>[INFO] ioc.RegistryBuilder Adding module definition for class com.kenai.tapestryjpa.JPAModule <br>[INFO] ioc.RegistryBuilder Adding module definition for class com.kenai.tapestryjpa.JPACoreModule <br>[INFO] ioc.RegistryBuilder Adding module definition for class org.apache.tapestry5.spring.SpringModule <br>[INFO] ioc.RegistryBuilder Adding module definition for class org.apache.tapestry5.services.TapestryModule <br>[INFO] ioc.RegistryBuilder Adding module definition for class org.apache.tapestry5.internal.services.InternalModule <br>[INFO] ioc.RegistryBuilder Adding module definition for class com.myproject.services.AppModule <br>[INFO] SpringModuleDef.ApplicationContext Starting Spring (version 2.5.6) <br>[INFO] context.ContextLoader Root WebApplicationContext: initialization started <br>[INFO] spring.TapestryApplicationContext Refreshing org.apache.tapestry5.spring.TapestryApplicationContext@39060b: display name [Root WebApplicationContext]; startup date [Mon Nov 09 22:03:52 UTC 2009]; root of context hierarchy <br>[INFO] xml.XmlBeanDefinitionReader Loading XML bean definitions from ServletContext resource [/WEB-INF/applicationContext.xml] <br>[INFO] spring.TapestryApplicationContext Bean factory for application context [org.apache.tapestry5.spring.TapestryApplicationContext@39060b]: org.apache.tapestry5.internal.spring.TapestyBeanFactory@d23e53 <br>[INFO] spring.TapestyBeanFactory Pre-instantiating singletons in org.apache.tapestry5.internal.spring.TapestyBeanFactory@d23e53: defining beans [txAdvice,org.springframework.aop.config.internalAutoProxyCreator,daoOperations,org.springframework.aop.support.DefaultBeanFactoryPointcutAdvisor#0,entityManagerFactory,txManager,org.springframework.context.annotation.internalPersistenceAnnotationProcessor,org.springframework.context.annotation.internalCommonAnnotationProcessor,org.springframework.context.annotation.internalAutowiredAnnotationProcessor,org.springframework.context.annotation.internalRequiredAnnotationProcessor,personDAO]; root of factory hierarchy <br>[INFO] jpa.LocalEntityManagerFactoryBean Building JPA EntityManagerFactory for persistence unit 'transactions-optional' <br>[INFO] DataNucleus.Plugin Bundle &quot;org.datanucleus.jpa&quot; has an optional dependency to &quot;org.datanucleus.enhancer&quot; but it cannot be resolved <br>[INFO] DataNucleus.Plugin Bundle &quot;org.datanucleus&quot; has an optional dependency to &quot;org.eclipse.equinox.registry&quot; but it cannot be resolved <br>[INFO] DataNucleus.Plugin Bundle &quot;org.datanucleus&quot; has an optional dependency to &quot;org.eclipse.core.runtime&quot; but it cannot be resolved <br>[WARN] DataNucleus.JPA No META-INF/persistence.xml files were found in the CLASSPATH of the current thread! <br>[WARN] DataNucleus.JPA No persistence unit of name &quot;transactions-optional&quot; is found in the CLASSPATH of the current thread! <br>[INFO] spring.TapestyBeanFactory Destroying singletons in org.apache.tapestry5.internal.spring.TapestyBeanFactory@d23e53: defining beans [txAdvice,org.springframework.aop.config.internalAutoProxyCreator,daoOperations,org.springframework.aop.support.DefaultBeanFactoryPointcutAdvisor#0,entityManagerFactory,txManager,org.springframework.context.annotation.internalPersistenceAnnotationProcessor,org.springframework.context.annotation.internalCommonAnnotationProcessor,org.springframework.context.annotation.internalAutowiredAnnotationProcessor,org.springframework.context.annotation.internalRequiredAnnotationProcessor,personDAO]; root of factory hierarchy <br>[ERROR] context.ContextLoader Context initialization failed <br>org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txAdvice': Cannot resolve reference to bean 'txManager' while setting bean property 'transactionManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:104) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1245) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1010) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409) <br>&nbsp; &nbsp; &nbsp; &nbsp; at java.security.AccessController.doPrivileged(Native Method) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:429) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:728) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:255) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:199) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.internal.spring.SpringModuleDef$3$1.invoke(SpringModuleDef.java:176) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.PerThreadOperationTracker.invoke(PerThreadOperationTracker.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RegistryImpl.invoke(RegistryImpl.java:941) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.internal.spring.SpringModuleDef$3.createObject(SpringModuleDef.java:166) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator$1.invoke(OperationTrackingObjectCreator.java:45) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.PerThreadOperationTracker.invoke(PerThreadOperationTracker.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RegistryImpl.invoke(RegistryImpl.java:941) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator.createObject(OperationTrackingObjectCreator.java:49) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.SingletonServiceLifecycle.createService(SingletonServiceLifecycle.java:29) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.LifecycleWrappedServiceCreator.createObject(LifecycleWrappedServiceCreator.java:46) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.AdvisorStackBuilder.createObject(AdvisorStackBuilder.java:60) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.InterceptorStackBuilder.createObject(InterceptorStackBuilder.java:52) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RecursiveServiceCreationCheckWrapper.createObject(RecursiveServiceCreationCheckWrapper.java:60) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator$1.invoke(OperationTrackingObjectCreator.java:45) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.PerThreadOperationTracker.invoke(PerThreadOperationTracker.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RegistryImpl.invoke(RegistryImpl.java:941) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator.createObject(OperationTrackingObjectCreator.java:49) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.services.JustInTimeObjectCreator.obtainObjectFromCreator(JustInTimeObjectCreator.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.services.JustInTimeObjectCreator.createObject(JustInTimeObjectCreator.java:57) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ConfigurableWebApplicationContext_124daf973a0.delegate($ConfigurableWebApplicationContext_124daf973a0.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ConfigurableWebApplicationContext_124daf973a0.getBeanDefinitionCount($ConfigurableWebApplicationContext_124daf973a0.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.spring.SpringModule$1.initializeApplication(SpringModule.java:53) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ApplicationInitializer_124daf973bb.initializeApplication($ApplicationInitializer_124daf973bb.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.services.TapestryModule$35.initializeApplication(TapestryModule.java:2132) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ApplicationInitializer_124daf973bb.initializeApplication($ApplicationInitializer_124daf973bb.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ApplicationInitializer_124daf973b7.initializeApplication($ApplicationInitializer_124daf973b7.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.services.TapestryModule$ServletApplicationInitializerTerminator.initializeApplication(TapestryModule.java:223) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ServletApplicationInitializer_124daf9739b.initializeApplication($ServletApplicationInitializer_124daf9739b.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.TapestryFilter.init(TapestryFilter.java:85) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:99) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:589) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.servlet.Context.startContext(Context.java:139) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1218) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:500) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:448) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:117) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:117) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.Server.doStart(Server.java:217) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.JettyContainerService.startContainer(JettyContainerService.java:181) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.AbstractContainerService.startup(AbstractContainerService.java:116) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerImpl.start(DevAppServerImpl.java:217) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerMain$StartAction.apply(DevAppServerMain.java:162) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.util.Parser$ParseResult.applyArgs(Parser.java:48) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerMain.&lt;init&gt;(DevAppServerMain.java:113) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerMain.main(DevAppServerMain.java:89) <br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:104) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1245) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1010) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409) <br>&nbsp; &nbsp; &nbsp; &nbsp; at java.security.AccessController.doPrivileged(Native Method) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:269) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 69 more <br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1338) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:473) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409) <br>&nbsp; &nbsp; &nbsp; &nbsp; at java.security.AccessController.doPrivileged(Native Method) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:269) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 82 more <br>Caused by: javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at javax.persistence.Persistence.createFactory(Persistence.java:176) <br>&nbsp; &nbsp; &nbsp; &nbsp; at javax.persistence.Persistence.createEntityManagerFactory(Persistence.java:112) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.orm.jpa.LocalEntityManagerFactoryBean.createNativeEntityManagerFactory(LocalEntityManagerFactoryBean.java:91) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.orm.jpa.AbstractEntityManagerFactoryBean.afterPropertiesSet(AbstractEntityManagerFactoryBean.java:291) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1369) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1335) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 92 more <br>Caused by: java.lang.NullPointerException <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.jpa.EntityManagerFactoryImpl.initialisePMF(EntityManagerFactoryImpl.java:452) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.jpa.EntityManagerFactoryImpl.&lt;init&gt;(EntityManagerFactoryImpl.java:355) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.store.appengine.jpa.DatastoreEntityManagerFactory.&lt;init&gt;(DatastoreEntityManagerFactory.java:63) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider.createEntityManagerFactory(DatastorePersistenceProvider.java:35) <br>&nbsp; &nbsp; &nbsp; &nbsp; at javax.persistence.Persistence.createFactory(Persistence.java:172) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 97 more <br>[ERROR] ioc.Registry Error creating bean with name 'txAdvice': Cannot resolve reference to bean 'txManager' while setting bean property 'transactionManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>[ERROR] ioc.Registry Operations trace: <br>[ERROR] ioc.Registry [ 1] Realizing service ApplicationContext <br>[ERROR] ioc.Registry [ 2] Invoking ObjectCreator for Spring ApplicationContext <br>[ERROR] ioc.Registry [ 3] Creating Spring ApplicationContext via ContextLoader <br>[ERROR] SpringModuleDef.ApplicationContext Construction of service ApplicationContext failed: Error creating bean with name 'txAdvice': Cannot resolve reference to bean 'txManager' while setting bean property 'transactionManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>org.apache.tapestry5.ioc.internal.OperationException: Error creating bean with name 'txAdvice': Cannot resolve reference to bean 'txManager' while setting bean property 'transactionManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:90) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.PerThreadOperationTracker.invoke(PerThreadOperationTracker.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RegistryImpl.invoke(RegistryImpl.java:941) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.internal.spring.SpringModuleDef$3.createObject(SpringModuleDef.java:166) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator$1.invoke(OperationTrackingObjectCreator.java:45) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.PerThreadOperationTracker.invoke(PerThreadOperationTracker.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RegistryImpl.invoke(RegistryImpl.java:941) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator.createObject(OperationTrackingObjectCreator.java:49) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.SingletonServiceLifecycle.createService(SingletonServiceLifecycle.java:29) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.LifecycleWrappedServiceCreator.createObject(LifecycleWrappedServiceCreator.java:46) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.AdvisorStackBuilder.createObject(AdvisorStackBuilder.java:60) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.InterceptorStackBuilder.createObject(InterceptorStackBuilder.java:52) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RecursiveServiceCreationCheckWrapper.createObject(RecursiveServiceCreationCheckWrapper.java:60) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator$1.invoke(OperationTrackingObjectCreator.java:45) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.PerThreadOperationTracker.invoke(PerThreadOperationTracker.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.RegistryImpl.invoke(RegistryImpl.java:941) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackingObjectCreator.createObject(OperationTrackingObjectCreator.java:49) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.services.JustInTimeObjectCreator.obtainObjectFromCreator(JustInTimeObjectCreator.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.services.JustInTimeObjectCreator.createObject(JustInTimeObjectCreator.java:57) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ConfigurableWebApplicationContext_124daf973a0.delegate($ConfigurableWebApplicationContext_124daf973a0.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ConfigurableWebApplicationContext_124daf973a0.getBeanDefinitionCount($ConfigurableWebApplicationContext_124daf973a0.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.spring.SpringModule$1.initializeApplication(SpringModule.java:53) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ApplicationInitializer_124daf973bb.initializeApplication($ApplicationInitializer_124daf973bb.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.services.TapestryModule$35.initializeApplication(TapestryModule.java:2132) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ApplicationInitializer_124daf973bb.initializeApplication($ApplicationInitializer_124daf973bb.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ApplicationInitializer_124daf973b7.initializeApplication($ApplicationInitializer_124daf973b7.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.services.TapestryModule$ServletApplicationInitializerTerminator.initializeApplication(TapestryModule.java:223) <br>&nbsp; &nbsp; &nbsp; &nbsp; at $ServletApplicationInitializer_124daf9739b.initializeApplication($ServletApplicationInitializer_124daf9739b.java) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.TapestryFilter.init(TapestryFilter.java:85) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:99) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:589) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.servlet.Context.startContext(Context.java:139) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1218) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:500) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:448) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:117) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:117) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.jetty.Server.doStart(Server.java:217) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:40) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.JettyContainerService.startContainer(JettyContainerService.java:181) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.AbstractContainerService.startup(AbstractContainerService.java:116) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerImpl.start(DevAppServerImpl.java:217) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerMain$StartAction.apply(DevAppServerMain.java:162) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.util.Parser$ParseResult.applyArgs(Parser.java:48) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerMain.&lt;init&gt;(DevAppServerMain.java:113) <br>&nbsp; &nbsp; &nbsp; &nbsp; at com.google.appengine.tools.development.DevAppServerMain.main(DevAppServerMain.java:89) <br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txAdvice': Cannot resolve reference to bean 'txManager' while setting bean property 'transactionManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:104) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1245) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1010) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409) <br>&nbsp; &nbsp; &nbsp; &nbsp; at java.security.AccessController.doPrivileged(Native Method) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:429) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:728) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:255) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:199) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.internal.spring.SpringModuleDef$3$1.invoke(SpringModuleDef.java:176) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:68) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 50 more <br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'txManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Cannot resolve reference to bean 'entityManagerFactory' while setting bean property 'entityManagerFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:104) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1245) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1010) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409) <br>&nbsp; &nbsp; &nbsp; &nbsp; at java.security.AccessController.doPrivileged(Native Method) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:269) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 69 more <br>Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Invocation of init method failed; nested exception is javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1338) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:473) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409) <br>&nbsp; &nbsp; &nbsp; &nbsp; at java.security.AccessController.doPrivileged(Native Method) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:269) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 82 more <br>Caused by: javax.persistence.PersistenceException: Provider error. Provider: org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider <br>&nbsp; &nbsp; &nbsp; &nbsp; at javax.persistence.Persistence.createFactory(Persistence.java:176) <br>&nbsp; &nbsp; &nbsp; &nbsp; at javax.persistence.Persistence.createEntityManagerFactory(Persistence.java:112) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.orm.jpa.LocalEntityManagerFactoryBean.createNativeEntityManagerFactory(LocalEntityManagerFactoryBean.java:91) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.orm.jpa.AbstractEntityManagerFactoryBean.afterPropertiesSet(AbstractEntityManagerFactoryBean.java:291) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1369) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1335) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 92 more <br>Caused by: java.lang.NullPointerException <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.jpa.EntityManagerFactoryImpl.initialisePMF(EntityManagerFactoryImpl.java:452) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.jpa.EntityManagerFactoryImpl.&lt;init&gt;(EntityManagerFactoryImpl.java:355) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.store.appengine.jpa.DatastoreEntityManagerFactory.&lt;init&gt;(DatastoreEntityManagerFactory.java:63) <br>&nbsp; &nbsp; &nbsp; &nbsp; at org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider.createEntityManagerFactory(DatastorePersistenceProvider.java:35) <br>&nbsp; &nbsp; &nbsp; &nbsp; at javax.persistence.Persistence.createFactory(Persistence.java:172) <br>&nbsp; &nbsp; &nbsp; &nbsp; ... 97 more <br>The server is running at <a href="http://localhost:8080/" target="_top" rel="nofollow">http://localhost:8080/</a><br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color"> <div class="quote-author" style="font-weight: bold;">Dmitry Gusev wrote:</div> <div class="quote-message shrinkable-quote">Here's some examples: <br><br>*ping-service\src\META-INF\persistence.xml:* <br>&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot; ?&gt; <br>&lt;persistence xmlns=&quot;<a href="http://java.sun.com/xml/ns/persistence" target="_top" rel="nofollow">http://java.sun.com/xml/ns/persistence</a>&quot; <br>&nbsp; &nbsp; xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_top" rel="nofollow">http://www.w3.org/2001/XMLSchema-instance</a>&quot; <br>&nbsp; &nbsp; xsi:schemaLocation=&quot;<a href="http://java.sun.com/xml/ns/persistence" target="_top" rel="nofollow">http://java.sun.com/xml/ns/persistence</a><br>&nbsp; &nbsp; &nbsp; &nbsp; <a href="http://java.sun.com/xml/ns/persistence/persistence_1_0.xsd" target="_top" rel="nofollow">http://java.sun.com/xml/ns/persistence/persistence_1_0.xsd</a>&quot; <br>version=&quot;1.0&quot;&gt; <br><br>&nbsp; &nbsp; &lt;persistence-unit name=&quot;transactions-optional&quot;&gt; <br><br>&lt;provider&gt;org.datanucleus.store.appengine.jpa.DatastorePersistenceProvider&lt;/provider&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;properties&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;property name=&quot;datanucleus.NontransactionalRead&quot; value=&quot;true&quot;/&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;property name=&quot;datanucleus.NontransactionalWrite&quot; <br>value=&quot;true&quot;/&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;property name=&quot;datanucleus.ConnectionURL&quot; value=&quot;appengine&quot;/&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;/properties&gt; <br>&nbsp; &nbsp; &lt;/persistence-unit&gt; <br><br>&lt;/persistence&gt; <br><br>*ping-service\war\WEB-INF\applicationContext.xml:* <br><br>&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt; <br>&lt;beans xmlns=&quot;<a href="http://www.springframework.org/schema/beans" target="_top" rel="nofollow">http://www.springframework.org/schema/beans</a>&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp;xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_top" rel="nofollow">http://www.w3.org/2001/XMLSchema-instance</a>&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp;xmlns:aop=&quot;<a href="http://www.springframework.org/schema/aop" target="_top" rel="nofollow">http://www.springframework.org/schema/aop</a>&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp;xmlns:tx=&quot;<a href="http://www.springframework.org/schema/tx" target="_top" rel="nofollow">http://www.springframework.org/schema/tx</a>&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp;xmlns:context=&quot;<a href="http://www.springframework.org/schema/context" target="_top" rel="nofollow">http://www.springframework.org/schema/context</a>&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp;xsi:schemaLocation=&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/beans" target="_top" rel="nofollow">http://www.springframework.org/schema/beans</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/beans/spring-beans-3.0.xsd" target="_top" rel="nofollow">http://www.springframework.org/schema/beans/spring-beans-3.0.xsd</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/tx" target="_top" rel="nofollow">http://www.springframework.org/schema/tx</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/tx/spring-tx-3.0.xsd" target="_top" rel="nofollow">http://www.springframework.org/schema/tx/spring-tx-3.0.xsd</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/aop" target="_top" rel="nofollow">http://www.springframework.org/schema/aop</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/aop/spring-aop-3.0.xsd" target="_top" rel="nofollow">http://www.springframework.org/schema/aop/spring-aop-3.0.xsd</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/context" target="_top" rel="nofollow">http://www.springframework.org/schema/context</a><br>&nbsp; &nbsp; &nbsp; &nbsp;<a href="http://www.springframework.org/schema/context/spring-context-3.0.xsd" target="_top" rel="nofollow">http://www.springframework.org/schema/context/spring-context-3.0.xsd</a><br>&quot;&gt; <br><br>&nbsp; &nbsp; &lt;tx:advice id=&quot;txAdvice&quot; transaction-manager=&quot;txManager&quot;&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;tx:attributes&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;tx:method name=&quot;*&quot; propagation=&quot;REQUIRES_NEW&quot; /&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;/tx:attributes&gt; <br>&nbsp; &nbsp; &lt;/tx:advice&gt; <br><br>&nbsp; &nbsp; &lt;aop:config&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;aop:pointcut id=&quot;daoOperations&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; expression=&quot;execution(* dmitrygusev.ping.services.dao.*.*(..))&quot; <br>/&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;aop:advisor advice-ref=&quot;txAdvice&quot; pointcut-ref=&quot;daoOperations&quot; /&gt; <br>&nbsp; &nbsp; &lt;/aop:config&gt; <br><br>&nbsp; &nbsp; &lt;bean id=&quot;entityManagerFactory&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp; class=&quot;org.springframework.orm.jpa.LocalEntityManagerFactoryBean&quot; <br>&nbsp; &nbsp; &nbsp; &nbsp; lazy-init=&quot;true&quot;&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;property name=&quot;persistenceUnitName&quot; value=&quot;transactions-optional&quot; <br>/&gt; <br>&nbsp; &nbsp; &lt;/bean&gt; <br><br>&nbsp; &nbsp; &lt;bean name=&quot;txManager&quot; <br>class=&quot;org.springframework.orm.jpa.JpaTransactionManager&quot;&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;property name=&quot;entityManagerFactory&quot; ref=&quot;entityManagerFactory&quot; /&gt; <br>&nbsp; &nbsp; &lt;/bean&gt; <br><br>&nbsp; &nbsp; &lt;context:annotation-config/&gt; <br><br>&nbsp; &nbsp; &lt;bean name=&quot;jobsDAO&quot; <br>class=&quot;dmitrygusev.ping.services.dao.impl.JobDAOImpl&quot;/&gt; <br>&nbsp; &nbsp; &lt;bean name=&quot;refDAO&quot; <br>class=&quot;dmitrygusev.ping.services.dao.impl.RefDAOImpl&quot;/&gt; <br>&nbsp; &nbsp; &lt;bean name=&quot;accountDAO&quot; <br>class=&quot;dmitrygusev.ping.services.dao.impl.AccountDAOImpl&quot;/&gt; <br>&nbsp; &nbsp; &lt;bean name=&quot;scheduleDAO&quot; <br>class=&quot;dmitrygusev.ping.services.dao.impl.ScheduleDAOImpl&quot;/&gt; <br>&nbsp; &nbsp; &lt;bean name=&quot;jobResultDAO&quot; <br>class=&quot;dmitrygusev.ping.services.dao.impl.JobResultDAOImpl&quot;/&gt; <br><br>&lt;/beans&gt; <br><br>*ping-service\src\dmitrygusev\ping\services\dao\ScheduleDAO.java :* <br>package dmitrygusev.ping.services.dao; <br><br>import com.google.appengine.api.datastore.Key; <br><br>import dmitrygusev.ping.entities.Schedule; <br><br>public interface ScheduleDAO { <br><br>&nbsp; &nbsp; public abstract void update(Schedule schedule); <br><br>&nbsp; &nbsp; public abstract void delete(Long id); <br><br>&nbsp; &nbsp; public abstract Schedule createSchedule(String name); <br><br>&nbsp; &nbsp; public abstract Schedule find(Key scheduleKey); <br><br>} <br><br>*ping-service\src\dmitrygusev\ping\services\dao\impl\ScheduleDAOImpl.java :* <br>package dmitrygusev.ping.services.dao.impl; <br><br>import static com.google.appengine.api.datastore.KeyFactory.createKey; <br><br>import javax.persistence.EntityManager; <br>import javax.persistence.PersistenceContext; <br><br>import com.google.appengine.api.datastore.Key; <br><br>import dmitrygusev.ping.entities.Schedule; <br>import dmitrygusev.ping.services.dao.ScheduleDAO; <br><br>public class ScheduleDAOImpl implements ScheduleDAO { <br><br>&nbsp; &nbsp; @PersistenceContext <br>&nbsp; &nbsp; private EntityManager em; <br><br>&nbsp; &nbsp; public Schedule createSchedule(String name) { <br>&nbsp; &nbsp; &nbsp; &nbsp; Schedule schedule = new Schedule(); <br>&nbsp; &nbsp; &nbsp; &nbsp; schedule.setName(name); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; em.persist(schedule); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; return schedule; <br>&nbsp; &nbsp; } <br><br>&nbsp; &nbsp; @Override <br>&nbsp; &nbsp; public void update(Schedule schedule) { <br>&nbsp; &nbsp; &nbsp; &nbsp; em.merge(schedule); <br>&nbsp; &nbsp; } <br><br>&nbsp; &nbsp; @Override <br>&nbsp; &nbsp; public void delete(Long id) { <br>&nbsp; &nbsp; &nbsp; &nbsp; Schedule schedule = find(createKey(Schedule.class.getSimpleName(), <br>id)); <br>&nbsp; &nbsp; &nbsp; &nbsp; em.remove(schedule); <br>&nbsp; &nbsp; } <br><br>&nbsp; &nbsp; @Override <br>&nbsp; &nbsp; public Schedule find(Key scheduleKey) { <br>&nbsp; &nbsp; &nbsp; &nbsp; return em.find(Schedule.class, scheduleKey); <br>&nbsp; &nbsp; } <br>} <br><br><br>*Then inject ScheduleDAO in your page class using T5's @Inject annotation <br>and use it.* <br><br><br><br>On Sun, Nov 8, 2009 at 17:46, Dmitry Gusev &lt;dmitry.gusev@gmail.com&gt; wrote: <br><br>&gt; Tapestry 5.1 should run on GAE 1.2.6(7) as is. <br>&gt; <br>&gt; I used T5.1 w/ Spring/JPA on GAE and didn't get any troubles at the cloud <br>&gt; except some issues on development machine: <br>&gt; <br>&gt; <br>&gt; <a href="http://dmitrygusev.blogspot.com/2009/10/develope-java-applications-with-gae-sdk.html" target="_top" rel="nofollow">http://dmitrygusev.blogspot.com/2009/10/develope-java-applications-with-gae-sdk.html</a><br>&gt; <br>&gt; <a href="http://dmitrygusev.blogspot.com/2009/08/turn-java-security-manager-off-in.html" target="_top" rel="nofollow">http://dmitrygusev.blogspot.com/2009/08/turn-java-security-manager-off-in.html</a><br>&gt; <br>&gt; <br>&gt; <br>&gt; On Sun, Nov 8, 2009 at 16:51, sodium &lt;sodium78@yahoo.com&gt; wrote: <br>&gt; <br>&gt;&gt; <br>&gt;&gt; Hi, <br>&gt;&gt; <br>&gt;&gt; I have been using Tapestry5 for few of my projects and loving it, but i am <br>&gt;&gt; thinking of integrating it in Google App Engine. <br>&gt;&gt; As for Tapestry 5.0.18, i have managed to run it without jpa support by <br>&gt;&gt; following an example of <br>&gt;&gt; <br>&gt;&gt; <a href="http://old.nabble.com/SUCCESSFULL-deploy-Tapestry5-on-google-appengine-ts23018048.html" target="_top" rel="nofollow">http://old.nabble.com/SUCCESSFULL-deploy-Tapestry5-on-google-appengine-ts23018048.html</a><br>&gt;&gt; <br>&gt;&gt; <a href="http://old.nabble.com/SUCCESSFULL-deploy-Tapestry5-on-google-appengine-ts23018048.html" target="_top" rel="nofollow">http://old.nabble.com/SUCCESSFULL-deploy-Tapestry5-on-google-appengine-ts23018048.html</a><br>&gt;&gt; <br>&gt;&gt; For Tapestry5.1, i still very confused about <br>&gt;&gt; <br>&gt;&gt; <a href="http://old.nabble.com/Tapestry-5.1-running-in-Google-App-Engine-%28GAE%29-tp24923950p24927028.html" target="_top" rel="nofollow">http://old.nabble.com/Tapestry-5.1-running-in-Google-App-Engine-%28GAE%29-tp24923950p24927028.html</a><br>&gt;&gt; <br>&gt;&gt; <a href="http://old.nabble.com/Tapestry-5.1-running-in-Google-App-Engine-%28GAE%29-tp24923950p24927028.html" target="_top" rel="nofollow">http://old.nabble.com/Tapestry-5.1-running-in-Google-App-Engine-%28GAE%29-tp24923950p24927028.html</a><br>&gt;&gt; <br>&gt;&gt; Actually my biggest concern is using jpa in GAE with Tapestry5, can anyone <br>&gt;&gt; provide some clues on how to go about integrating Tap5 with jpa for GAE ? <br>&gt;&gt; If <br>&gt;&gt; someone can provide a sample project for GAE(1.2.6) Tapestry5(hopefully <br>&gt;&gt; 5.1) <br>&gt;&gt; integration with jpa support, i will definitely bow down to u like a <br>&gt;&gt; slave. <br>&gt;&gt; Been scratching my head so hard that my hair is starting to fall... <br>&gt;&gt; <br>&gt;&gt; I tried integration Tapestry 5.0.18 with guice2 for jpa support from <br>&gt;&gt; <br>&gt;&gt; <a href="http://old.nabble.com/Integration-of-T5-with-the-domain-model-ts9953748s302.html" target="_top" rel="nofollow">http://old.nabble.com/Integration-of-T5-with-the-domain-model-ts9953748s302.html</a><br>&gt;&gt; <br>&gt;&gt; <a href="http://old.nabble.com/Integration-of-T5-with-the-domain-model-ts9953748s302.html" target="_top" rel="nofollow">http://old.nabble.com/Integration-of-T5-with-the-domain-model-ts9953748s302.html</a><br>&gt;&gt; but the EntityManager keep returning null. Sigh.. <br>&gt;&gt; <br>&gt;&gt; Any pointers and advice is very much appreciated. <br>&gt;&gt; <br>&gt;&gt; -- <br>&gt;&gt; View this message in context: <br>&gt;&gt; <a href="http://old.nabble.com/GAE-and-Tapestry5-integration-tp26253952p26253952.html" target="_top" rel="nofollow">http://old.nabble.com/GAE-and-Tapestry5-integration-tp26253952p26253952.html</a><br>&gt;&gt; Sent from the Tapestry - User mailing list archive at Nabble.com. <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt; To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>&gt;&gt; For additional commands, e-mail: users-help@tapestry.apache.org <br>&gt;&gt; <br>&gt;&gt; <br>&gt; <br>&gt; <br>&gt; -- <br>&gt; Dmitry Gusev <br>&gt; <br>&gt; AnjLab Team <br>&gt; <a href="http://anjlab.com" target="_top" rel="nofollow">http://anjlab.com</a><br>&gt; <br><br><br><br>-- <br>Dmitry Gusev <br><br>AnjLab Team <br><a href="http://anjlab.com" target="_top" rel="nofollow">http://anjlab.com</a></div> </div></blockquote> <p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26274573 2009-11-09T14:06:24Z 2009-11-09T14:06:24Z Howard Lewis Ship Looks like a bug .... with a tricky fix. <br><br>On Mon, Nov 9, 2009 at 4:28 AM, Alfie Kirkpatrick <br>&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274573&i=0" target="_top" rel="nofollow">Alfie.Kirkpatrick@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; This call appears to remove any namespace information, so the following <br>&gt; are not equivalent: <br>&gt; <br>&gt; <br>&gt; <br>&gt;                &lt;t:mycomponent element=&quot;ns:something&quot;/&gt; <br>&gt; <br>&gt;                &lt;ns:something t:type=&quot;mycomponent&quot;/&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; In the first case the element parameter is &quot;ns:something&quot;. In the second <br>&gt; case calling getElementName() returns 'something' without the namespace. <br>&gt; <br>&gt; <br>&gt; <br>&gt; Is this intentional? <br>&gt; <br>&gt; <br>&gt; <br>&gt; Thanks, Alfie. <br>&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; </div><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274573&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274573&i=2" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26274446 2009-11-09T13:57:25Z 2009-11-09T13:57:25Z Michael Gentry-2 I thought I had been through most of the site, but I had never seen <br>the shadow services page. <br><br>Thanks for the link, Howard! <br><br>mrg <br><br><br>On Mon, Nov 9, 2009 at 4:43 PM, Howard Lewis Ship &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=0" target="_top" rel="nofollow">hlship@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; You know how you can inject the Request?  Well the Request service is <br>&gt; really an extension of the per-thread RequestGlobals object, which <br>&gt; stores the Request and Response. <br>&gt; <br>&gt; Turns out, Tapestry can implement this approach for you automatically; <br>&gt; creating a proxy object that delegates all of its method invocations <br>&gt; to another object (accessed as a property of some known service or <br>&gt; object). <br>&gt; <br>&gt; There's a few special builders used for edge cases like this. <br>&gt; <br>&gt; On Mon, Nov 9, 2009 at 1:35 PM, Michael Gentry &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=1" target="_top" rel="nofollow">mgentry@...</a>&gt; wrote: <br>&gt;&gt; Shadow builders?  I've only been using T5 for about 2 months now. <br>&gt;&gt; When do I learn about shadow builders?  :-) <br>&gt; <br>&gt; <a href="http://tapestry.apache.org/tapestry5.1/tapestry-ioc/shadow.html" target="_top" rel="nofollow">http://tapestry.apache.org/tapestry5.1/tapestry-ioc/shadow.html</a><br>&gt; <br>&gt;&gt; <br>&gt;&gt; mrg <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; On Sat, Nov 7, 2009 at 4:34 PM, Carl Crowder &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=2" target="_top" rel="nofollow">carl.crowder@...</a>&gt; wrote: <br>&gt;&gt;&gt; Agreed: the main thing Tapestry is lacking is a book that explains not just <br>&gt;&gt;&gt; the basics but also concepts that it takes months of working with Tapestry <br>&gt;&gt;&gt; to discover. Things like shadow builders and so on. I don't care who writes <br>&gt;&gt;&gt; one as long as there's a definitive guide! <br>&gt;&gt; <br>&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt;&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=4" target="_top" rel="nofollow">users-help@...</a> <br>&gt;&gt; <br>&gt;&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; -- <br>&gt; Howard M. Lewis Ship <br>&gt; <br>&gt; Creator of Apache Tapestry <br>&gt; <br>&gt; The source for Tapestry training, mentoring and support. Contact me to <br>&gt; learn how I can get you up and productive in Tapestry fast! <br>&gt; <br>&gt; (971) 678-5210 <br>&gt; <a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=5" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=6" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; </div><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=7" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274446&i=8" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26274347 2009-11-09T13:50:35Z 2009-11-09T13:50:35Z Michael Gentry-2 I think documentation and small/focused cookbook-type examples (thank <br>goodness for JumpStart) are the biggest hurdle to people learning and <br>using T5 currently. &nbsp;(At least that is my experience.) &nbsp;The user <br>community and framework are robust, but figuring out how to do <br>something can be challenging at times (even when searching the mailing <br>list). <br><br>I'm not exactly sure what the motivation for writing a book would be. <br>Maybe you want to make some money off of it or use it as a marketing <br>tool (developers can tell their PHBs there is a Tapestry book)? &nbsp;My <br>personal preference would be to have good documentation at <br>tapestry.apache.org -- something that can be updated (paper dates <br>itself quickly, especially when Tapestry 5.2.0.24 comes out) and is <br>searchable (Google is my brain these days). &nbsp;Maybe even have it as a <br>downloadable PDF that people can put on digital readers. &nbsp;My hope for <br>you (and us) would be that with good documentation (including <br>examples/tutorials) and marketing, more developers would come, and a <br>larger developer base could increase your consulting business. <br><br>As for a 5.2 release, it is important, but not as important as good <br>documentation at this point. &nbsp;At least that's my opinion. &nbsp;You could <br>even do a few bug-fix releases (5.1.0.x) before 5.2 while working on <br>the documentation/book. <br><br>Thanks! <br><br>mrg <br><br>PS. I also think having fragmented documentation (the web site, the <br>wiki, etc) makes things harder to find, too. <br><br><br>On Sat, Nov 7, 2009 at 1:11 PM, Howard &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274347&i=0" target="_top" rel="nofollow">hlship@...</a>&gt; wrote: <br>&gt; [lots of things about books and coding] <br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274347&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274347&i=2" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26274242 2009-11-09T13:44:03Z 2009-11-09T13:44:03Z Thiago H. de Paula Figueiredo Em Mon, 09 Nov 2009 19:35:09 -0200, Michael Gentry &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274242&i=0" target="_top" rel="nofollow">mgentry@...</a>&gt; &nbsp; <br>escreveu: <br><br>&gt; Shadow builders? &nbsp;I've only been using T5 for about 2 months now. <br>&gt; When do I learn about shadow builders? &nbsp;:-) <br><br>The documentation is here. The concept is simple. :) <br><br>-- <br>Thiago H. de Paula Figueiredo <br>Independent Java, Apache Tapestry 5 and Hibernate consultant, developer, &nbsp; <br>and instructor <br>Owner, software architect and developer, Ars Machina Tecnologia da &nbsp; <br>Informação Ltda. <br><a href="http://www.arsmachina.com.br" target="_top" rel="nofollow">http://www.arsmachina.com.br</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274242&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274242&i=2" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26274231 2009-11-09T13:43:17Z 2009-11-09T13:43:17Z Howard Lewis Ship You know how you can inject the Request? &nbsp;Well the Request service is <br>really an extension of the per-thread RequestGlobals object, which <br>stores the Request and Response. <br><br>Turns out, Tapestry can implement this approach for you automatically; <br>creating a proxy object that delegates all of its method invocations <br>to another object (accessed as a property of some known service or <br>object). <br><br>There's a few special builders used for edge cases like this. <br><br>On Mon, Nov 9, 2009 at 1:35 PM, Michael Gentry &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274231&i=0" target="_top" rel="nofollow">mgentry@...</a>&gt; wrote: <br>&gt; Shadow builders?  I've only been using T5 for about 2 months now. <br>&gt; When do I learn about shadow builders?  :-) <br><br><a href="http://tapestry.apache.org/tapestry5.1/tapestry-ioc/shadow.html" target="_top" rel="nofollow">http://tapestry.apache.org/tapestry5.1/tapestry-ioc/shadow.html</a><br><div class='shrinkable-quote'><br>&gt; <br>&gt; mrg <br>&gt; <br>&gt; <br>&gt; On Sat, Nov 7, 2009 at 4:34 PM, Carl Crowder &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274231&i=1" target="_top" rel="nofollow">carl.crowder@...</a>&gt; wrote: <br>&gt;&gt; Agreed: the main thing Tapestry is lacking is a book that explains not just <br>&gt;&gt; the basics but also concepts that it takes months of working with Tapestry <br>&gt;&gt; to discover. Things like shadow builders and so on. I don't care who writes <br>&gt;&gt; one as long as there's a definitive guide! <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274231&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274231&i=3" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; </div><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274231&i=4" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274231&i=5" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26274117 2009-11-09T13:35:09Z 2009-11-09T13:35:09Z Michael Gentry-2 Shadow builders? &nbsp;I've only been using T5 for about 2 months now. <br>When do I learn about shadow builders? &nbsp;:-) <br><br>mrg <br><br><br>On Sat, Nov 7, 2009 at 4:34 PM, Carl Crowder &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274117&i=0" target="_top" rel="nofollow">carl.crowder@...</a>&gt; wrote: <br>&gt; Agreed: the main thing Tapestry is lacking is a book that explains not just <br>&gt; the basics but also concepts that it takes months of working with Tapestry <br>&gt; to discover. Things like shadow builders and so on. I don't care who writes <br>&gt; one as long as there's a definitive guide! <br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274117&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26274117&i=2" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26273998 2009-11-09T13:26:37Z 2009-11-09T13:26:37Z Alexey Hanin Oh, I finally found what I was doing wrong :) Just misread the <br>documentation. The parameter bound to the property which is named <br>exactly as component. In fact only one property can be bound. <br><br>On Mon, Nov 9, 2009 at 2:14 PM, Alexey Hanin &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273998&i=0" target="_top" rel="nofollow">gagarin61@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; Seriously, guys? Anyone? <br>&gt; <br>&gt; On Sun, Nov 8, 2009 at 8:55 AM, Alexey Hanin &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273998&i=1" target="_top" rel="nofollow">gagarin61@...</a>&gt; wrote: <br>&gt;&gt; Hmm... Seems like autoconnect does not work for me as I expect. <br>&gt;&gt; <br>&gt;&gt; I checked in setupRender() inside EditorComponent and found that <br>&gt;&gt; 'entity' is null, while Page.setupRender() assigns new value to its <br>&gt;&gt; same named property. <br>&gt;&gt; <br>&gt;&gt; What am I doing wrong? <br>&gt;&gt; <br>&gt;&gt; On Sat, Nov 7, 2009 at 7:50 PM, Alexey Hanin &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273998&i=2" target="_top" rel="nofollow">gagarin61@...</a>&gt; wrote: <br>&gt;&gt;&gt; Hello, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Recently I found that autoconnect-parameters are being copied instead <br>&gt;&gt;&gt; of being set as reference to parent parameter. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; What I want is to implement various editor-components containing <br>&gt;&gt;&gt; BeanEditForm accessing parent property. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; class Page { <br>&gt;&gt;&gt; <br>&gt;&gt;&gt;  @Property <br>&gt;&gt;&gt;  private EntityObject entity; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt;  void onSuccess() { <br>&gt;&gt;&gt;   // save entity here <br>&gt;&gt;&gt;  } <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; } <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; class EditorComponent { <br>&gt;&gt;&gt; <br>&gt;&gt;&gt;  @Property <br>&gt;&gt;&gt;  @Parameter(autoconnect = true) <br>&gt;&gt;&gt;  private EntityObject entity; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; } <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Which way do I have to start to dig to? <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Alexey. <br>&gt;&gt;&gt; <br>&gt;&gt; <br>&gt; </div><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273998&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273998&i=4" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26273788 2009-11-09T13:13:00Z 2009-11-09T13:13:00Z keykubat Hello There, <br><br>More examples, functional tutorials please... <br>it is good news that the tutorials will come out... <br><br>So that an expansion will occur in user base,& popularity. <br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color"> <div class="quote-author" style="font-weight: bold;">Howard Lewis Ship wrote:</div> <div class="quote-message shrinkable-quote">There's several options. <br><br>You can use the Tapestry Quickstart archetype (i.e., maven template). <br><br>You can use the Jumpstart which is a more complete application <br>template & tutorial. <br><br>Here's a small example I use in my presentations: <br><a href="http://github.com/hlship/t5intro" target="_top" rel="nofollow">http://github.com/hlship/t5intro</a><br><br>Please check the Tapestry web site for more links. <br><br>On Mon, Nov 9, 2009 at 7:55 AM, Jonhy Pear &lt;jonhy.pear@gmail.com&gt; wrote: <br>&gt; Hello all, <br>&gt; <br>&gt; Is there any fully functional Web application in Tapestry5 that can be used <br>&gt; as a guide to bootstrap our skills in Tapestry5? <br>&gt; <br>&gt; Thank you <br>&gt; <br><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>For additional commands, e-mail: users-help@tapestry.apache.org <br></div> </div></blockquote> <p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26273063 2009-11-09T12:22:25Z 2009-11-09T12:22:25Z Howard Lewis Ship There's a lot of room for optimizations here; Tapestry is using the <br>ClassLoader.getResource() method extensively, and it is very, very <br>slow. More work to ensure that we don't constantly check and re-check <br>for the existence of files would make a huge difference in performance <br>when you are talking about this many properties files. The same may <br>apply to component templates (which can be localized if you like, thus <br>the same lookup overhead). <br><br>On Mon, Nov 9, 2009 at 4:11 AM, Blower, Andy &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=0" target="_top" rel="nofollow">Andy.Blower@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; We also have a lot of properties files, but so far only one translation. We will have 20+ translations in due course, so I would be concerned if there were performance problems/implications. We're already using 5.1, so I'd be interested if this version has issues will many files. <br>&gt; <br>&gt;&gt; -----Original Message----- <br>&gt;&gt; From: Thiago H. de Paula Figueiredo [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=1" target="_top" rel="nofollow">thiagohp@...</a>] <br>&gt;&gt; Sent: 08 November 2009 13:30 <br>&gt;&gt; To: Tapestry users <br>&gt;&gt; Subject: Re: i18n overhead <br>&gt;&gt; <br>&gt;&gt; Em Sun, 08 Nov 2009 11:20:48 -0200, Melidramo &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=2" target="_top" rel="nofollow">a5@...</a>&gt; <br>&gt;&gt; escreveu: <br>&gt;&gt; <br>&gt;&gt; &gt;&gt; Why so many property files? Just curious. :) <br>&gt;&gt; &gt; This is a big project... <br>&gt;&gt; <br>&gt;&gt; :) <br>&gt;&gt; <br>&gt;&gt; &gt;&gt; What exact version? 5.1.05? 5.0.18? <br>&gt;&gt; &gt; 5.0.18 <br>&gt;&gt; <br>&gt;&gt; There are some changes between 5.0.18 to 5.1.0.5 that can affect <br>&gt;&gt; performance. <br>&gt;&gt; <br>&gt;&gt; &gt; Is your question an incentive to migrate to 5.1? <br>&gt;&gt; <br>&gt;&gt; Regardless of performance issues, I think it's a good thing to do. <br>&gt;&gt; <br>&gt;&gt; -- <br>&gt;&gt; Thiago H. de Paula Figueiredo <br>&gt;&gt; Independent Java, Apache Tapestry 5 and Hibernate consultant, <br>&gt;&gt; developer, <br>&gt;&gt; and instructor <br>&gt;&gt; Owner, software architect and developer, Ars Machina Tecnologia da <br>&gt;&gt; Informação Ltda. <br>&gt;&gt; <a href="http://www.arsmachina.com.br" target="_top" rel="nofollow">http://www.arsmachina.com.br</a><br>&gt;&gt; <br>&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt;&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=4" target="_top" rel="nofollow">users-help@...</a> <br>&gt;&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=5" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=6" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; </div><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=7" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26273063&i=8" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26272410 2009-11-09T11:38:47Z 2009-11-09T11:38:47Z Jonhy Pear That's it! Thank you. <br><br><br><br>On Mon, Nov 9, 2009 at 7:09 PM, Michael Gentry &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=0" target="_top" rel="nofollow">mgentry@...</a>&gt;wrote: <br><div class='shrinkable-quote'><br>&gt; JumpStart Examples: <br>&gt; <br>&gt; <a href="http://jumpstart.doublenegative.com.au:8080/jumpstart/examples" target="_top" rel="nofollow">http://jumpstart.doublenegative.com.au:8080/jumpstart/examples</a><br>&gt; <br>&gt; <br>&gt; On Mon, Nov 9, 2009 at 2:00 PM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=1" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; wrote: <br>&gt; &gt; Thanks for the link. <br>&gt; &gt; <br>&gt; &gt; I've started with the Maven archetype. <br>&gt; &gt; <br>&gt; &gt; Where is the Jumpstart app you mention? can you send me that link? <br>&gt; &gt; <br>&gt; &gt; On Mon, Nov 9, 2009 at 4:12 PM, Howard Lewis Ship &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=2" target="_top" rel="nofollow">hlship@...</a>&gt; <br>&gt; wrote: <br>&gt; &gt; <br>&gt; &gt;&gt; There's several options. <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; You can use the Tapestry Quickstart archetype (i.e., maven template). <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; You can use the Jumpstart which is a more complete application <br>&gt; &gt;&gt; template & tutorial. <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; Here's a small example I use in my presentations: <br>&gt; &gt;&gt; <a href="http://github.com/hlship/t5intro" target="_top" rel="nofollow">http://github.com/hlship/t5intro</a><br>&gt; &gt;&gt; <br>&gt; &gt;&gt; Please check the Tapestry web site for more links. <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; On Mon, Nov 9, 2009 at 7:55 AM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=3" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; <br>&gt; wrote: <br>&gt; &gt;&gt; &gt; Hello all, <br>&gt; &gt;&gt; &gt; <br>&gt; &gt;&gt; &gt; Is there any fully functional Web application in Tapestry5 that can be <br>&gt; &gt;&gt; used <br>&gt; &gt;&gt; &gt; as a guide to bootstrap our skills in Tapestry5? <br>&gt; &gt;&gt; &gt; <br>&gt; &gt;&gt; &gt; Thank you <br>&gt; &gt;&gt; &gt; <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; -- <br>&gt; &gt;&gt; Howard M. Lewis Ship <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; Creator of Apache Tapestry <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; The source for Tapestry training, mentoring and support. Contact me to <br>&gt; &gt;&gt; learn how I can get you up and productive in Tapestry fast! <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; (971) 678-5210 <br>&gt; &gt;&gt; <a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br>&gt; &gt;&gt; <br>&gt; &gt;&gt; --------------------------------------------------------------------- <br>&gt; &gt;&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=4" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; &gt;&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=5" target="_top" rel="nofollow">users-help@...</a> <br>&gt; &gt;&gt; <br>&gt; &gt;&gt; <br>&gt; &gt; <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=6" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272410&i=7" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; <br></div><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26272353 2009-11-09T11:35:32Z 2009-11-09T11:35:32Z JIRA jira@apache.org <br>&nbsp; &nbsp; [ <a href="https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12775085#action_12775085" target="_top" rel="nofollow">https://issues.apache.org/jira/browse/TAP5-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12775085#action_12775085</a>&nbsp;] <br><br>Robert Zeigler commented on TAP5-815: <br>------------------------------------- <br><br>Hey Chris, <br><br>I just committed the AssetProtectionDispatcher stuff (to 5.0 and 5.1 branches and to trunk). &nbsp;That should solve your issue, but if you want to double check that, it would be great. <br>Leaving this issue open for the time being to give people a chance to review. &nbsp;I'll close it tonight or tomorrow if I don't hear anything more. <br><div class='shrinkable-quote'><br>&gt; Asset dispatcher allows any file inside the webapp visible and downloadable <br>&gt; --------------------------------------------------------------------------- <br>&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Key: TAP5-815 <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; URL: <a href="https://issues.apache.org/jira/browse/TAP5-815" target="_top" rel="nofollow">https://issues.apache.org/jira/browse/TAP5-815</a><br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Project: Tapestry 5 <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Issue Type: Bug <br>&gt; &nbsp; &nbsp;Affects Versions: 5.1.0.5 <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Reporter: Thiago H. de Paula Figueiredo <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Assignee: Robert Zeigler <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Priority: Blocker <br>&gt; <br>&gt; Take any asset and you have an URL like domain.com/assets/ctx/f10407a6c1753e39/css/main.css. If you request domain.com/assets/ctx/f10407a6c1753e39/, a list containing all the files inside the webapp root is shown. It gives you the hint at downloading any file you want, including anyting inside WEB-INF and assets that should be protected by ResourceDigestGenerator. </div><br>-- <br>This message is automatically generated by JIRA. <br>- <br>You can reply to this email to add a comment to the issue online. <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---Dev-f339.html" embed="fixTarget[339]" target="_top" >Tapestry - Dev</a></p> tag:old.nabble.com,2006:post-26272250 2009-11-09T11:28:33Z 2009-11-09T11:28:33Z robertdzeigler Author: robertdzeigler <br>Date: Mon Nov &nbsp;9 19:28:32 2009 <br>New Revision: 834180 <br><br>URL: <a href="http://svn.apache.org/viewvc?rev=834180&view=rev" target="_top" rel="nofollow">http://svn.apache.org/viewvc?rev=834180&view=rev</a><br>Log: <br>TAP5-815: Asset dispatcher allows any file inside the webapp visible and downloadable (5.0 branch) <br><br>Added: <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java <br>Modified: <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/src/site/apt/guide/assets.apt <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java <br><br>Modified: tapestry/tapestry5/branches/5.0/src/site/apt/guide/assets.apt <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/src/site/apt/guide/assets.apt?rev=834180&r1=834179&r2=834180&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/src/site/apt/guide/assets.apt?rev=834180&r1=834179&r2=834180&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/src/site/apt/guide/assets.apt (original) <br>+++ tapestry/tapestry5/branches/5.0/src/site/apt/guide/assets.apt Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -98,4 +98,28 @@ <br>&nbsp; &nbsp;Care should be taken to not create overlapping mappings, as the results would not be predictable. &nbsp; <br>&nbsp; <br>&nbsp; <br>- &nbsp; <br>\ No newline at end of file <br>+Securing Assets <br>+ <br>+ &nbsp;Securing assets is an important consideration for any web application. &nbsp;Many assets, such as hibernate configuration <br>+ &nbsp;files, sit in the classpath and are exposable via the Asset service, which is not desirable. &nbsp;To protect these and <br>+ &nbsp;other sensitive assets, Tapestry provides the AssetProtectionDispatcher. &nbsp;This dispatcher sits in front of the <br>+ &nbsp;AssetDispatcher, the service responsible for streaming assets to the client, and watches for Asset requests. <br>+ &nbsp;When an asset request comes in, the protection dispatcher checks for authorization to view the file against a <br>+ &nbsp;contributed list of AssetPathAuthorizer implementations. &nbsp;Determination of whether the client can view the requested <br>+ &nbsp;resource is then made based on whether any of the contributed AssetPathAuthorizer implementations explicitly allowed <br>+ &nbsp;or denied access to the resource. <br>+ <br>+ &nbsp;Tapestry provides two AssetPathAuthorizer implemenations &quot;out of the box&quot; to which users may contribute: RegexAuthorizer <br>+ &nbsp;and WhitelistAuthorizer. &nbsp;RegexAuthorizer uses regular expressions to determine assets which are viewable by the <br>+ &nbsp;client; any assets that match one of its (contributed) regular expressions are authorized. Anything not matched is <br>+ &nbsp;passed through to the WhitelistAuthorizer. &nbsp;WhitelistAuthorizer uses an exact-matching whitelist. &nbsp;Anything matching <br>+ &nbsp;exactly one its contributions is allowed; all other asset requests are denied. &nbsp;The default tapestry configuration <br>+ &nbsp;contributes nothing to WhitelistAuthorizer (access will be denied to all asset requests passed through to it), and <br>+ &nbsp;explicitly allows access to css, jpg, jpeg, js, png, and gif files associated with tapestry (tapestry.js, blackbird <br>+ &nbsp;files, date picker files, etc.). &nbsp;The default contribution also enables access to the css, jpg, jpeg, js, png, and gif <br>+ &nbsp;files provided by the popular chenille-kit 3rd party library. The default configuration denies access to all other <br>+ &nbsp;assets. &nbsp;To enable access to your application's assets, either contribute a custom AssetPathAnalyzer, or contribute <br>+ &nbsp;appropriate regular expression or exact path contributions to RegexAuthorizer or WhitelistAuthorizer, respectively. <br>+ &nbsp;See TapestryModule.contribteRegexAuthorizer for examples. <br>+ <br>+ <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,92 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.io.IOException; <br>+import java.util.Collection; <br>+import java.util.Collections; <br>+import java.util.List; <br>+ <br>+import javax.servlet.http.HttpServletResponse; <br>+ <br>+import org.apache.tapestry5.internal.services.RequestConstants; <br>+import org.apache.tapestry5.services.*; <br>+import org.slf4j.Logger; <br>+ <br>+/** <br>+ * Dispatcher that handles whether to allow or deny access to particular <br>+ * assets. Actual work of authorizing a particular url is handled by <br>+ * implementations of AssetPathAuthorizer. Configuration is an ordered <br>+ * list of AssetPathAuthorizers. &nbsp;Each authorizer specifies an order of <br>+ * operations as a list (see AssetPathAuthorizer.Order). <br>+ * <br>+ */ <br>+public class AssetProtectionDispatcher implements Dispatcher <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private final Collection&lt;AssetPathAuthorizer&gt; authorizers; <br>+ &nbsp; &nbsp;private final ClasspathAssetAliasManager assetAliasManager; <br>+ &nbsp; &nbsp;private final Logger logger; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public AssetProtectionDispatcher( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;ClasspathAssetAliasManager manager, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Logger logger) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.authorizers = Collections.unmodifiableList(auths); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.assetAliasManager = manager; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.logger = logger; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean dispatch(Request request, Response response) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String path = request.getPath(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//we only protect assets, and don't examine any other url's. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;if (!path.startsWith(RequestConstants.ASSET_PATH_PREFIX)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String resourcePath = assetAliasManager.toResourcePath(path); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(AssetPathAuthorizer auth : authorizers) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;for(AssetPathAuthorizer.Order o : auth.order()) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (o == AssetPathAuthorizer.Order.ALLOW) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (auth.accessAllowed(resourcePath)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Allowing access to &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;else <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (auth.accessDenied(resourcePath)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Denying access to &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;response.sendError(HttpServletResponse.SC_FORBIDDEN,resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return true; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//if we get here, no Authorizer had anything useful to say about the resourcePath. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//so let it fall through. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Fell through the list of authorizers. Allowing access to: &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,76 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+import java.util.ArrayList; <br>+import java.util.Arrays; <br>+import java.util.Collection; <br>+import java.util.Collections; <br>+import java.util.List; <br>+import java.util.regex.Pattern; <br>+ <br>+/** <br>+ * Provides a regex-based authorization scheme for asset-access authorization. <br>+ * Note that this implementation doesn't actually deny access to anything. <br>+ * But it's placement within the chain of command of authorizers is just before <br>+ * the whitelist authorizer, which has an explicit deny policy. <br>+ * Hence, as long as the whitelist authorizer is being used in conjunction with <br>+ * the regex authorizer, there is no need to worry about accessDenied in this authorizer. <br>+ * <br>+ */ <br>+public class RegexAuthorizer implements AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private final Collection&lt;Pattern&gt; _regexes; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public RegexAuthorizer(final Collection&lt;String&gt; regex) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//an alternate way to construct this would be to make sure that each pattern is grouped <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//and then to regex or the various patterns together into a single pattern. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//that might be faster, but probably not enough to make a difference, and this is cleaner. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;Pattern&gt; tmp = new ArrayList&lt;Pattern&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(String exp : regex) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;tmp.add(Pattern.compile(exp)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;_regexes = Collections.unmodifiableCollection(tmp); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessAllowed(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(Pattern regex : _regexes) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (regex.matcher(resourcePath).matches()) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return true; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessDenied(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public List&lt;Order&gt; order() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return Arrays.asList(Order.ALLOW); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,59 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+import java.util.Arrays; <br>+import java.util.Collection; <br>+import java.util.List; <br>+import java.util.Map; <br>+import java.util.concurrent.ConcurrentHashMap; <br>+ <br>+/** <br>+ * AssetPathAuthorizer that determines access rights based on exact matching to a contributed whitelist. <br>+ * Any resource not explicitly specified in the whitelist is denied access. <br>+ */ <br>+public class WhitelistAuthorizer implements AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public List&lt;Order&gt; order() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return Arrays.asList(Order.ALLOW, Order.DENY); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;//hash the resource paths for fast lookups. <br>+ &nbsp; &nbsp;private final Map&lt;String, Boolean&gt; _paths; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public WhitelistAuthorizer(Collection&lt;String&gt; paths) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;_paths = new ConcurrentHashMap&lt;String, Boolean&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(String path : paths) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;_paths.put(path, true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public boolean accessAllowed(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return (_paths.containsKey(resourcePath)); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessDenied(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return !_paths.containsKey(resourcePath); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,76 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.services; <br>+ <br>+import java.util.List; <br>+ <br>+/** <br>+ * Determines whether access to an asset is allowed, denied, or undetermined. <br>+ * Each contributed authorizer makes up part of a chain of command for determining access. <br>+ * Access is explicitly allowed if accessAllowed returns true. <br>+ * Access is explicitly denied if accessDenied returns true. <br>+ * Ordering depends on the order specified by the &quot;order&quot; parameter. <br>+ * Hence, an implementation which specifies an order of: <br>+ * ALLOW, DENY, and returns true from both accessAllowed and accessDenied <br>+ * will allow access for all resources. With the same return values for the <br>+ * access* methods but the order switched to DENY, ALLOW, access to all resources <br>+ * would be denied. &nbsp;It is possible for an authorizer to have &quot;nothing <br>+ * to say&quot; regarding a particular resource. &nbsp;If accessAllowed returns false, <br>+ * it does not mean that access is denied, merely that it is not explicitly allowed. <br>+ * If accessDenied returns false, it does not mean that access is allowed, merely that <br>+ * it is not explicitly denied. &nbsp;Hence, if both accessAllowed and accessDenied return false, <br>+ * control will pass to the next authorizer in the chain. <br>+ * <br>+ */ <br>+public interface AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Types of orderings, either ALLOW or DENY. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;enum Order {ALLOW, DENY;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Specify the ordering for this authorizer. <br>+ &nbsp; &nbsp; * @return the operations for this authorizer. <br>+ &nbsp; &nbsp; * Operations will be performed in the order returned by the iterator. <br>+ &nbsp; &nbsp; * It is assumed that the authorizer correctly implements each form of <br>+ &nbsp; &nbsp; * ordering returned. It is acceptable to only return only ALLOW or DENY. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;List&lt;Order&gt; order(); <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Determines whether a request to &quot;resourcePath&quot; is allowed. <br>+ &nbsp; &nbsp; * @param resourcePath <br>+ &nbsp; &nbsp; * @return true if access is explicitly allowed for the path. False otherwise. <br>+ &nbsp; &nbsp; * For example, a whitelist implementation would return true if the resource <br>+ &nbsp; &nbsp; * was listed, and false otherwise. &nbsp;A blacklist implementation would return <br>+ &nbsp; &nbsp; * false regardless of whether the path was in the blacklist. <br>+ &nbsp; &nbsp; * Alternatively, if the blacklist specified an order of DENY, ALLOW, it could <br>+ &nbsp; &nbsp; * return true from accessAllowed if the resource was not explicitly listed in its <br>+ &nbsp; &nbsp; * blacklist. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;boolean accessAllowed(String resourcePath); <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * <br>+ &nbsp; &nbsp; * @param resourcePath <br>+ &nbsp; &nbsp; * @return true if access is explicitly prohibited for the path. False otherwise. <br>+ &nbsp; &nbsp; * For example, a whitelist implementation would return true if the resource was <br>+ &nbsp; &nbsp; * not explicitly listed, and false otherwise. A blacklist implementation would <br>+ &nbsp; &nbsp; * return true if the resource was explicitly denied, and false otherwise. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;boolean accessDenied(String resourcePath); <br>+} <br><br>Modified: tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java?rev=834180&r1=834179&r2=834180&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java?rev=834180&r1=834179&r2=834180&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java (original) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -191,6 +191,9 @@ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&quot;NullFieldStrategyBindingFactory&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(URLEncoder.class, URLEncoderImpl.class); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(ContextPathEncoder.class, ContextPathEncoderImpl.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(Dispatcher.class, AssetProtectionDispatcher.class).withId(&quot;AssetProtectionDispatcher&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(AssetPathAuthorizer.class, WhitelistAuthorizer.class).withId(&quot;WhitelistAuthorizer&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(AssetPathAuthorizer.class, RegexAuthorizer.class).withId(&quot;RegexAuthorizer&quot;); <br>&nbsp; &nbsp; &nbsp;} <br>&nbsp; <br>&nbsp; &nbsp; &nbsp;// ======================================================================== <br>@@ -1385,6 +1388,7 @@ <br>&nbsp; &nbsp; &nbsp; * and forwards onto the {@link ComponentEventRequestHandler}&lt;/dd&gt; &lt;/dl&gt; <br>&nbsp; &nbsp; &nbsp; */ <br>&nbsp; &nbsp; &nbsp;public void contributeMasterDispatcher(OrderedConfiguration&lt;Dispatcher&gt; configuration, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; @InjectService(&quot;AssetProtectionDispatcher&quot;) Dispatcher assetProt, <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ObjectLocator locator) <br>&nbsp; &nbsp; &nbsp;{ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// Looks for the root path and renders the start page. This is maintained for compatibility <br>@@ -1394,6 +1398,9 @@ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;locator.autobuild(RootPathDispatcher.class), <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&quot;before:Asset&quot;); <br>&nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//this goes before asset to make sure that only allowed assets are streamed to the client. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;AssetProtection&quot;, assetProt, &quot;before:Asset&quot;); <br>+ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// This goes first because an asset to be streamed may have an file extension, such as <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// &quot;.html&quot;, that will confuse the later dispatchers. <br>&nbsp; <br>@@ -2157,4 +2164,38 @@ <br>&nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return service; <br>&nbsp; &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Contributes the default set of AssetPathAuthorizers into the AssetProtectionDispatcher. <br>+ &nbsp; &nbsp; * @param whitelist authorization based on explicit whitelisting. <br>+ &nbsp; &nbsp; * @param regex authorization based on pattern matching. <br>+ &nbsp; &nbsp; * @param conf <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;public static void contributeAssetProtectionDispatcher( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;WhitelistAuthorizer&quot;) AssetPathAuthorizer whitelist, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;RegexAuthorizer&quot;) AssetPathAuthorizer regex, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;OrderedConfiguration&lt;AssetPathAuthorizer&gt; conf) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//putting whitelist after everything ensures that, in fact, nothing falls through. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//also ensures that whitelist gives other authorizers the chance to act... <br>+ &nbsp; &nbsp; &nbsp; &nbsp;conf.add(&quot;regex&quot;,regex,&quot;before:whitelist&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;conf.add(&quot;whitelist&quot;, whitelist,&quot;after:*&quot;); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public void contributeRegexAuthorizer(Configuration&lt;String&gt; regex, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.scriptaculous.path&quot;) String scriptPath, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.datepicker.path&quot;) String datepickerPath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//allow any js, jpg, jpeg, png, or css under org/chenillekit/tapstry. The funky bit of ([^/.]+/)* is what allows <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//multiple paths, while not allowing any of those paths to contains ./ or ../ thereby preventing paths like: <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//org/chenillekit/tapestry/../../../foo.js <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String pathPattern = &quot;([^/.]+/)*[^/.]+\\.((css)|(js)|(jpg)|(jpeg)|(png)|(gif))$&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;^org/chenillekit/tapestry/&quot; + pathPattern); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;^org/apache/tapestry5/&quot; + pathPattern); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(datepickerPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(scriptPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp;} <br>+ <br>&nbsp;} <br><br>Modified: tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java?rev=834180&r1=834179&r2=834180&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java?rev=834180&r1=834179&r2=834180&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java (original) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -238,4 +238,22 @@ <br>&nbsp; &nbsp; &nbsp;{ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;ReverseStringsWorker&quot;, new ReverseStringsWorker()); <br>&nbsp; &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public static void contributeRegexAuthorizer(Configuration&lt;String&gt; configuration) { <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//use this rather than a blanket regex (^.*.jpg$, etc.); want to be sure that tests pass from the default <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//configuration setup, (eg: this way, I realized that the &quot;virtual&quot; assets folder <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//needed to be opened up in the tapestry-provided contributions) rather than from some blanket configuration in the appmodule <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//opening up all css, js, etc. files. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//would contribute to whitelist except that the resource path between ctxt and the rest of the path can change. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/css/app\\.css$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/style\\.css$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/bg\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/header\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/rightsmall\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/rightbig\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/bottom\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/footer\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/images/tapestry_banner\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/images/asf_logo_wide\\.gif$&quot;); <br>+ &nbsp; &nbsp;} <br>&nbsp;} <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,92 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import static org.easymock.EasyMock.createMock; <br>+import static org.easymock.EasyMock.expect; <br>+import static org.easymock.EasyMock.*; <br>+ <br>+import java.io.IOException; <br>+import java.util.ArrayList; <br>+import java.util.Arrays; <br>+import java.util.Collections; <br>+import java.util.List; <br>+ <br>+import javax.servlet.http.HttpServletResponse; <br>+ <br>+import org.apache.tapestry5.internal.services.RequestConstants; <br>+import org.apache.tapestry5.internal.services.AssetProtectionDispatcher; <br>+import org.apache.tapestry5.services.ClasspathAssetAliasManager; <br>+import org.apache.tapestry5.services.Request; <br>+import org.apache.tapestry5.services.Response; <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.slf4j.Logger; <br>+ <br>+public class AssetProtectionDispatcherTest extends Assert <br>+{ <br>+ <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void ignores_nonassets() throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//shouldn't need any configuration here... <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths = Collections.emptyList(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Logger logger = createMock(Logger.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetProtectionDispatcher disp = new AssetProtectionDispatcher(auths,null,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Request request = createMock(Request.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(&quot;start&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Response response = createMock(Response.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;replay(request,response,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(disp.dispatch(request, response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;verify(request,response,logger); <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void checks_authorizers() throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Logger logger = createMock(Logger.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths = new ArrayList&lt;AssetPathAuthorizer&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetPathAuthorizer auth = createMock(AssetPathAuthorizer.class); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.order()).andReturn(Arrays.asList(AssetPathAuthorizer.Order.ALLOW, AssetPathAuthorizer.Order.DENY)).times(2); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessAllowed(&quot;/cayenne.xml&quot;)).andReturn(false); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessDenied(&quot;/cayenne.xml&quot;)).andReturn(true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessAllowed(&quot;/org/apache/tapestry/default.css&quot;)).andReturn(true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;auths.add(auth); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Denying access to /cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Allowing access to /org/apache/tapestry/default.css&quot;); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Request request = createMock(Request.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Response response = createMock(Response.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(RequestConstants.ASSET_PATH_PREFIX + &quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(RequestConstants.ASSET_PATH_PREFIX + &quot;/org/apache/tapestry/default.css&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;response.sendError(HttpServletResponse.SC_FORBIDDEN, &quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;ClasspathAssetAliasManager manager = createMock(ClasspathAssetAliasManager.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(manager.toResourcePath(RequestConstants.ASSET_PATH_PREFIX + &quot;/cayenne.xml&quot;)).andReturn(&quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(manager.toResourcePath( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;RequestConstants.ASSET_PATH_PREFIX + &quot;/org/apache/tapestry/default.css&quot;)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;.andReturn(&quot;/org/apache/tapestry/default.css&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;replay(auth,request,response,manager,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetProtectionDispatcher disp = new AssetProtectionDispatcher(auths,manager,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(disp.dispatch(request,response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(disp.dispatch(request, response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;verify(auth,request,response,logger); <br>+ &nbsp; &nbsp;} <br>+} <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,53 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.util.Arrays; <br>+import java.util.List; <br>+ <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.apache.tapestry5.internal.services.RegexAuthorizer; <br>+ <br>+public class RegexAuthorizerTest extends Assert <br>+{ <br>+ <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void test_regexes() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;String&gt; patterns = Arrays.asList(&quot;^.*\\.png$&quot;,&quot;^.*\\.jpg&quot;,&quot;^.*\\.jpeg&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;RegexAuthorizer auth = new RegexAuthorizer(patterns); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String pkg = &quot;assets/com/saiwaisolutions/resources/&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String png = pkg + &quot;foo.png&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String jpg = pkg + &quot;foo.jpg&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String jpeg = pkg + &quot;foo.jpeg&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String xml = pkg + &quot;foo.xml&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,png,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,jpg,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,jpeg,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,xml,false); <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private static void test(RegexAuthorizer auth, String one,boolean allowed) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.accessAllowed(one),allowed); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;auth.accessAllowed( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&quot;<a href="http://localhost:8080" target="_top" rel="nofollow">http://localhost:8080</a>&quot; + one), <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;allowed); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(one)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(&quot;<a href="http://localhost:8080" target="_top" rel="nofollow">http://localhost:8080</a>&quot; + one)); <br>+ &nbsp; &nbsp;} <br>+} <br><br>Added: tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java?rev=834180&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java?rev=834180&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java (added) <br>+++ tapestry/tapestry5/branches/5.0/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java Mon Nov &nbsp;9 19:28:32 2009 <br>@@ -0,0 +1,45 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+/* <br>+ * Created on Jul 28, 2007 <br>+ * <br>+ * <br>+ */ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.util.Arrays; <br>+ <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.apache.tapestry5.internal.services.WhitelistAuthorizer; <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+public class WhitelistAuthorizerTest extends Assert { <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void run() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;WhitelistAuthorizer auth = new WhitelistAuthorizer(Arrays.asList(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().get(0), AssetPathAuthorizer.Order.ALLOW); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().get(1), AssetPathAuthorizer.Order.DENY); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().size(),2); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(auth.accessAllowed(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessAllowed(&quot;bar&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(auth.accessDenied(&quot;bar&quot;)); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---Dev-f339.html" embed="fixTarget[339]" target="_top" >Tapestry - Dev</a></p> tag:old.nabble.com,2006:post-26272234 2009-11-09T11:27:04Z 2009-11-09T11:27:04Z Jonhy Pear I'm experimenting your code but I'm blocked :( <br><br>I have in my page.java <br>@Property <br>private String password; <br>@Property <br>private String confirmPassword; <br><br>in my tml: <br>&lt;form t:id=&quot;userRegistrationForm&quot; t:type=&quot;beaneditform&quot; object=&quot;user&quot; <br>add=&quot;password, confirmPassword&quot; exclude=&quot;id, active&quot;&gt; <br><br>&lt;p:passsword&gt; <br>&lt;t:label for=&quot;password&quot; /&gt; <br>&lt;t:passwordfield t:id=&quot;password&quot; validate=&quot;required&quot; /&gt; <br>&lt;/p:passsword&gt; <br>&nbsp;&lt;p:confirmPassword&gt; <br>&lt;t:label for=&quot;confirmPassword&quot; /&gt; <br>&lt;t:passwordfield t:id=&quot;confirmPassword&quot; validate=&quot;required&quot; /&gt; <br>&lt;/p:confirmPassword&gt; <br>&lt;/form&gt; <br><br>But I get this error: <br><br>Render queue error in <br>BeginRender[user/New:userregistrationform.editor.propertyeditor]: The data <br>type for property 'password' of org.code.sandbox.model.User@d9973a is null. <br>* <br>* <br>*Can you help me?* <br><br>On Mon, Nov 9, 2009 at 4:13 PM, ningdh &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272234&i=0" target="_top" rel="nofollow">ningdhcn@...</a>&gt; wrote: <br><div class='shrinkable-quote'><br>&gt; I am sorry that &quot;Object onValidate&quot; should be &quot;Object onValidateForm&quot;. <br>&gt; <br>&gt; DH <br>&gt; <br>&gt; ----- Original Message ----- <br>&gt; From: &quot;João Pereira&quot; <br>&gt; To: &quot;Tapestry users&quot; &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272234&i=1" target="_top" rel="nofollow">users@...</a>&gt; <br>&gt; Sent: Monday, November 09, 2009 11:53 PM <br>&gt; Subject: Re: beaneditform question <br>&gt; <br>&gt; <br>&gt; Thank you. <br>&gt; <br>&gt; <br>&gt; On Mon, Nov 9, 2009 at 1:50 AM, DH &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272234&i=2" target="_top" rel="nofollow">ningdhcn@...</a>&gt; wrote: <br>&gt; <br>&gt; &gt; Hi <br>&gt; &gt; <br>&gt; &gt; Simple sample(t5.1): <br>&gt; &gt; <br>&gt; &gt; In tml: <br>&gt; &gt; &lt;form t:id=&quot;regForm&quot; t:type=&quot;beaneditform&quot; object=&quot;user&quot; <br>&gt; &gt; include=&quot;nick,firstName,lastName&quot; add=&quot;password,retypePassword&quot;&gt; <br>&gt; &gt; &nbsp; &nbsp;&lt;p:password&gt; <br>&gt; &gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:label for=&quot;password&quot;/&gt; <br>&gt; &gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:passwordfield t:id=&quot;password&quot; validate=&quot;required&quot;&gt; <br>&gt; &gt; &nbsp; &nbsp;&lt;/p:password&gt; <br>&gt; &gt; &nbsp; &nbsp;&lt;p:retypePassword&gt; <br>&gt; &gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:label for=&quot;retypePassword&quot;/&gt; <br>&gt; &gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:passwordfield t:id=&quot;retypePassword&quot; validate=&quot;required&quot;&gt; <br>&gt; &gt; &nbsp; &nbsp;&lt;/p:retypePassword&gt; <br>&gt; &gt; &lt;/form&gt; <br>&gt; &gt; <br>&gt; &gt; In java: <br>&gt; &gt; <br>&gt; &gt; @Component <br>&gt; &gt; private BeanEditForm regForm; <br>&gt; &gt; <br>&gt; &gt; @Property <br>&gt; &gt; private User user; // your user entity <br>&gt; &gt; <br>&gt; &gt; @Property <br>&gt; &gt; private String password; <br>&gt; &gt; <br>&gt; &gt; @Property <br>&gt; &gt; private String retypePassword; <br>&gt; &gt; <br>&gt; &gt; Object onValidate() { <br>&gt; &gt; &nbsp; &nbsp;if (!password.equals(retypePassword)) { <br>&gt; &gt; &nbsp; &nbsp; &nbsp; &nbsp;regForm.recordError(&quot;password and retypepassword must be == &quot;); <br>&gt; &gt; &nbsp; &nbsp; &nbsp; &nbsp;return this; // meaning validation failed <br>&gt; &gt; &nbsp; &nbsp;} <br>&gt; &gt; &nbsp; &nbsp;return null; // validation successfully. <br>&gt; &gt; } <br>&gt; &gt; <br>&gt; &gt; Object onSuccess() { <br>&gt; &gt; &nbsp; &nbsp;user.setPassword(encodeutil.encode(password)); <br>&gt; &gt; &nbsp; &nbsp;service.save(user); <br>&gt; &gt; &nbsp; &nbsp;return successpage or other; <br>&gt; &gt; } <br>&gt; &gt; <br>&gt; &gt; DH <br>&gt; &gt; <a href="http://www.gaonline.com.cn" target="_top" rel="nofollow">http://www.gaonline.com.cn</a><br>&gt; <br></div><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26272041 2009-11-09T11:13:53Z 2009-11-09T11:13:53Z Sergey Didenko I would prioritize the directions in the following way: <br><br>1) T5.1.1.x with important bugfixes <br><br>2) The website ( the future book can be just a compilation and <br>extension of website materials) <br><br>3-4) T5.2 and book <br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272041&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26272041&i=1" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26271971 2009-11-09T11:09:25Z 2009-11-09T11:09:25Z Michael Gentry-2 JumpStart Examples: <br><br><a href="http://jumpstart.doublenegative.com.au:8080/jumpstart/examples" target="_top" rel="nofollow">http://jumpstart.doublenegative.com.au:8080/jumpstart/examples</a><br><br><br>On Mon, Nov 9, 2009 at 2:00 PM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=0" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; Thanks for the link. <br>&gt; <br>&gt; I've started with the Maven archetype. <br>&gt; <br>&gt; Where is the Jumpstart app you mention? can you send me that link? <br>&gt; <br>&gt; On Mon, Nov 9, 2009 at 4:12 PM, Howard Lewis Ship &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=1" target="_top" rel="nofollow">hlship@...</a>&gt; wrote: <br>&gt; <br>&gt;&gt; There's several options. <br>&gt;&gt; <br>&gt;&gt; You can use the Tapestry Quickstart archetype (i.e., maven template). <br>&gt;&gt; <br>&gt;&gt; You can use the Jumpstart which is a more complete application <br>&gt;&gt; template & tutorial. <br>&gt;&gt; <br>&gt;&gt; Here's a small example I use in my presentations: <br>&gt;&gt; <a href="http://github.com/hlship/t5intro" target="_top" rel="nofollow">http://github.com/hlship/t5intro</a><br>&gt;&gt; <br>&gt;&gt; Please check the Tapestry web site for more links. <br>&gt;&gt; <br>&gt;&gt; On Mon, Nov 9, 2009 at 7:55 AM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=2" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; wrote: <br>&gt;&gt; &gt; Hello all, <br>&gt;&gt; &gt; <br>&gt;&gt; &gt; Is there any fully functional Web application in Tapestry5 that can be <br>&gt;&gt; used <br>&gt;&gt; &gt; as a guide to bootstrap our skills in Tapestry5? <br>&gt;&gt; &gt; <br>&gt;&gt; &gt; Thank you <br>&gt;&gt; &gt; <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; -- <br>&gt;&gt; Howard M. Lewis Ship <br>&gt;&gt; <br>&gt;&gt; Creator of Apache Tapestry <br>&gt;&gt; <br>&gt;&gt; The source for Tapestry training, mentoring and support. Contact me to <br>&gt;&gt; learn how I can get you up and productive in Tapestry fast! <br>&gt;&gt; <br>&gt;&gt; (971) 678-5210 <br>&gt;&gt; <a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br>&gt;&gt; <br>&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt;&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=4" target="_top" rel="nofollow">users-help@...</a> <br>&gt;&gt; <br>&gt;&gt; <br>&gt; </div><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=5" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271971&i=6" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26271828 2009-11-09T11:00:52Z 2009-11-09T11:00:52Z Jonhy Pear Thanks for the link. <br><br>I've started with the Maven archetype. <br><br>Where is the Jumpstart app you mention? can you send me that link? <br><br>On Mon, Nov 9, 2009 at 4:12 PM, Howard Lewis Ship &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271828&i=0" target="_top" rel="nofollow">hlship@...</a>&gt; wrote: <br><div class='shrinkable-quote'><br>&gt; There's several options. <br>&gt; <br>&gt; You can use the Tapestry Quickstart archetype (i.e., maven template). <br>&gt; <br>&gt; You can use the Jumpstart which is a more complete application <br>&gt; template & tutorial. <br>&gt; <br>&gt; Here's a small example I use in my presentations: <br>&gt; <a href="http://github.com/hlship/t5intro" target="_top" rel="nofollow">http://github.com/hlship/t5intro</a><br>&gt; <br>&gt; Please check the Tapestry web site for more links. <br>&gt; <br>&gt; On Mon, Nov 9, 2009 at 7:55 AM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271828&i=1" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; wrote: <br>&gt; &gt; Hello all, <br>&gt; &gt; <br>&gt; &gt; Is there any fully functional Web application in Tapestry5 that can be <br>&gt; used <br>&gt; &gt; as a guide to bootstrap our skills in Tapestry5? <br>&gt; &gt; <br>&gt; &gt; Thank you <br>&gt; &gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; -- <br>&gt; Howard M. Lewis Ship <br>&gt; <br>&gt; Creator of Apache Tapestry <br>&gt; <br>&gt; The source for Tapestry training, mentoring and support. Contact me to <br>&gt; learn how I can get you up and productive in Tapestry fast! <br>&gt; <br>&gt; (971) 678-5210 <br>&gt; <a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271828&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271828&i=3" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; <br></div><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26271415 2009-11-09T10:38:10Z 2009-11-09T10:38:10Z shymon <br>Hi, <br><br>I use LinkSubmit on two pages of my app. On one page it works fine but on the other it's not; when I click on that link nothing happens. The only difference I have noticed is in form action generated by T5. On &quot;working&quot; page it looks like: <br><br>&nbsp; &nbsp; action=&quot;/appContext/pageName.formId&quot; <br><br>and on &quot;not-working&quot; page <br><br>&nbsp; &nbsp; action=&quot;pageName.formId&quot; <br><br>What can cause this problem?<p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26271292 2009-11-09T10:26:49Z 2009-11-09T10:26:49Z robertdzeigler Author: robertdzeigler <br>Date: Mon Nov &nbsp;9 18:26:48 2009 <br>New Revision: 834167 <br><br>URL: <a href="http://svn.apache.org/viewvc?rev=834167&view=rev" target="_top" rel="nofollow">http://svn.apache.org/viewvc?rev=834167&view=rev</a><br>Log: <br>TAP5-815: Asset dispatcher allows any file inside the webapp visible and downloadable (5.1 branch) <br><br>Added: <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java <br>Modified: <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/src/site/apt/guide/assets.apt <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java <br>&nbsp; &nbsp; tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java <br><br>Modified: tapestry/tapestry5/branches/5.1.0.x-dev/src/site/apt/guide/assets.apt <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/src/site/apt/guide/assets.apt?rev=834167&r1=834166&r2=834167&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/src/site/apt/guide/assets.apt?rev=834167&r1=834166&r2=834167&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/src/site/apt/guide/assets.apt (original) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/src/site/apt/guide/assets.apt Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -138,6 +138,31 @@ <br>&nbsp; &nbsp;In addition, context assets will use the URL prefix &lt;&lt;&lt;/assets/ctx/&gt;&gt;&gt;&lt;app-version&gt;&lt;&lt;&lt;/&gt;&gt;&gt;. <br>&nbsp; <br>&nbsp; <br>+Securing Assets <br>+ <br>+ &nbsp;Securing assets is an important consideration for any web application. &nbsp;Many assets, such as hibernate configuration <br>+ &nbsp;files, sit in the classpath and are exposable via the Asset service, which is not desirable. &nbsp;To protect these and <br>+ &nbsp;other sensitive assets, Tapestry provides the AssetProtectionDispatcher. &nbsp;This dispatcher sits in front of the <br>+ &nbsp;AssetDispatcher, the service responsible for streaming assets to the client, and watches for Asset requests. <br>+ &nbsp;When an asset request comes in, the protection dispatcher checks for authorization to view the file against a <br>+ &nbsp;contributed list of AssetPathAuthorizer implementations. &nbsp;Determination of whether the client can view the requested <br>+ &nbsp;resource is then made based on whether any of the contributed AssetPathAuthorizer implementations explicitly allowed <br>+ &nbsp;or denied access to the resource. <br>+ <br>+ &nbsp;Tapestry provides two AssetPathAuthorizer implemenations &quot;out of the box&quot; to which users may contribute: RegexAuthorizer <br>+ &nbsp;and WhitelistAuthorizer. &nbsp;RegexAuthorizer uses regular expressions to determine assets which are viewable by the <br>+ &nbsp;client; any assets that match one of its (contributed) regular expressions are authorized. Anything not matched is <br>+ &nbsp;passed through to the WhitelistAuthorizer. &nbsp;WhitelistAuthorizer uses an exact-matching whitelist. &nbsp;Anything matching <br>+ &nbsp;exactly one its contributions is allowed; all other asset requests are denied. &nbsp;The default tapestry configuration <br>+ &nbsp;contributes nothing to WhitelistAuthorizer (access will be denied to all asset requests passed through to it), and <br>+ &nbsp;explicitly allows access to css, jpg, jpeg, js, png, and gif files associated with tapestry (tapestry.js, blackbird <br>+ &nbsp;files, date picker files, etc.). &nbsp;The default contribution also enables access to the css, jpg, jpeg, js, png, and gif <br>+ &nbsp;files provided by the popular chenille-kit 3rd party library. The default configuration denies access to all other <br>+ &nbsp;assets. &nbsp;To enable access to your application's assets, either contribute a custom AssetPathAnalyzer, or contribute <br>+ &nbsp;appropriate regular expression or exact path contributions to RegexAuthorizer or WhitelistAuthorizer, respectively. <br>+ &nbsp;See TapestryModule.contribteRegexAuthorizer for examples. <br>+ <br>+ <br>&nbsp;Performance Notes <br>&nbsp; <br>&nbsp; &nbsp;Assets are expected to be entirely static (not changing while the application is deployed). When Tapestry generates a URL <br>@@ -146,4 +171,4 @@ <br>&nbsp; &nbsp;asset. <br>&nbsp; <br>&nbsp; &nbsp;In addition, Tapestry will {{{compress.html}GZIP compress}} the content of &lt;all&gt; assets (if the asset <br>- &nbsp;is compressable, and the client supports it). <br>\ No newline at end of file <br>+ &nbsp;is compressable, and the client supports it). <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,92 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.io.IOException; <br>+import java.util.Collection; <br>+import java.util.Collections; <br>+import java.util.List; <br>+ <br>+import javax.servlet.http.HttpServletResponse; <br>+ <br>+import org.apache.tapestry5.internal.services.RequestConstants; <br>+import org.apache.tapestry5.services.*; <br>+import org.slf4j.Logger; <br>+ <br>+/** <br>+ * Dispatcher that handles whether to allow or deny access to particular <br>+ * assets. Actual work of authorizing a particular url is handled by <br>+ * implementations of AssetPathAuthorizer. Configuration is an ordered <br>+ * list of AssetPathAuthorizers. &nbsp;Each authorizer specifies an order of <br>+ * operations as a list (see AssetPathAuthorizer.Order). <br>+ * <br>+ */ <br>+public class AssetProtectionDispatcher implements Dispatcher <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private final Collection&lt;AssetPathAuthorizer&gt; authorizers; <br>+ &nbsp; &nbsp;private final ClasspathAssetAliasManager assetAliasManager; <br>+ &nbsp; &nbsp;private final Logger logger; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public AssetProtectionDispatcher( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;ClasspathAssetAliasManager manager, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Logger logger) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.authorizers = Collections.unmodifiableList(auths); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.assetAliasManager = manager; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.logger = logger; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean dispatch(Request request, Response response) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String path = request.getPath(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//we only protect assets, and don't examine any other url's. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;if (!path.startsWith(RequestConstants.ASSET_PATH_PREFIX)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String resourcePath = assetAliasManager.toResourcePath(path); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(AssetPathAuthorizer auth : authorizers) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;for(AssetPathAuthorizer.Order o : auth.order()) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (o == AssetPathAuthorizer.Order.ALLOW) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (auth.accessAllowed(resourcePath)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Allowing access to &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;else <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (auth.accessDenied(resourcePath)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Denying access to &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;response.sendError(HttpServletResponse.SC_FORBIDDEN,resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return true; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//if we get here, no Authorizer had anything useful to say about the resourcePath. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//so let it fall through. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Fell through the list of authorizers. Allowing access to: &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,76 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+import java.util.ArrayList; <br>+import java.util.Arrays; <br>+import java.util.Collection; <br>+import java.util.Collections; <br>+import java.util.List; <br>+import java.util.regex.Pattern; <br>+ <br>+/** <br>+ * Provides a regex-based authorization scheme for asset-access authorization. <br>+ * Note that this implementation doesn't actually deny access to anything. <br>+ * But it's placement within the chain of command of authorizers is just before <br>+ * the whitelist authorizer, which has an explicit deny policy. <br>+ * Hence, as long as the whitelist authorizer is being used in conjunction with <br>+ * the regex authorizer, there is no need to worry about accessDenied in this authorizer. <br>+ * <br>+ */ <br>+public class RegexAuthorizer implements AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private final Collection&lt;Pattern&gt; _regexes; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public RegexAuthorizer(final Collection&lt;String&gt; regex) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//an alternate way to construct this would be to make sure that each pattern is grouped <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//and then to regex or the various patterns together into a single pattern. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//that might be faster, but probably not enough to make a difference, and this is cleaner. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;Pattern&gt; tmp = new ArrayList&lt;Pattern&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(String exp : regex) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;tmp.add(Pattern.compile(exp)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;_regexes = Collections.unmodifiableCollection(tmp); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessAllowed(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(Pattern regex : _regexes) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (regex.matcher(resourcePath).matches()) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return true; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessDenied(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public List&lt;Order&gt; order() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return Arrays.asList(Order.ALLOW); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,59 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+import java.util.Arrays; <br>+import java.util.Collection; <br>+import java.util.List; <br>+import java.util.Map; <br>+import java.util.concurrent.ConcurrentHashMap; <br>+ <br>+/** <br>+ * AssetPathAuthorizer that determines access rights based on exact matching to a contributed whitelist. <br>+ * Any resource not explicitly specified in the whitelist is denied access. <br>+ */ <br>+public class WhitelistAuthorizer implements AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public List&lt;Order&gt; order() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return Arrays.asList(Order.ALLOW, Order.DENY); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;//hash the resource paths for fast lookups. <br>+ &nbsp; &nbsp;private final Map&lt;String, Boolean&gt; _paths; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public WhitelistAuthorizer(Collection&lt;String&gt; paths) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;_paths = new ConcurrentHashMap&lt;String, Boolean&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(String path : paths) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;_paths.put(path, true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public boolean accessAllowed(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return (_paths.containsKey(resourcePath)); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessDenied(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return !_paths.containsKey(resourcePath); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,76 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.services; <br>+ <br>+import java.util.List; <br>+ <br>+/** <br>+ * Determines whether access to an asset is allowed, denied, or undetermined. <br>+ * Each contributed authorizer makes up part of a chain of command for determining access. <br>+ * Access is explicitly allowed if accessAllowed returns true. <br>+ * Access is explicitly denied if accessDenied returns true. <br>+ * Ordering depends on the order specified by the &quot;order&quot; parameter. <br>+ * Hence, an implementation which specifies an order of: <br>+ * ALLOW, DENY, and returns true from both accessAllowed and accessDenied <br>+ * will allow access for all resources. With the same return values for the <br>+ * access* methods but the order switched to DENY, ALLOW, access to all resources <br>+ * would be denied. &nbsp;It is possible for an authorizer to have &quot;nothing <br>+ * to say&quot; regarding a particular resource. &nbsp;If accessAllowed returns false, <br>+ * it does not mean that access is denied, merely that it is not explicitly allowed. <br>+ * If accessDenied returns false, it does not mean that access is allowed, merely that <br>+ * it is not explicitly denied. &nbsp;Hence, if both accessAllowed and accessDenied return false, <br>+ * control will pass to the next authorizer in the chain. <br>+ * <br>+ */ <br>+public interface AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Types of orderings, either ALLOW or DENY. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;enum Order {ALLOW, DENY;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Specify the ordering for this authorizer. <br>+ &nbsp; &nbsp; * @return the operations for this authorizer. <br>+ &nbsp; &nbsp; * Operations will be performed in the order returned by the iterator. <br>+ &nbsp; &nbsp; * It is assumed that the authorizer correctly implements each form of <br>+ &nbsp; &nbsp; * ordering returned. It is acceptable to only return only ALLOW or DENY. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;List&lt;Order&gt; order(); <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Determines whether a request to &quot;resourcePath&quot; is allowed. <br>+ &nbsp; &nbsp; * @param resourcePath <br>+ &nbsp; &nbsp; * @return true if access is explicitly allowed for the path. False otherwise. <br>+ &nbsp; &nbsp; * For example, a whitelist implementation would return true if the resource <br>+ &nbsp; &nbsp; * was listed, and false otherwise. &nbsp;A blacklist implementation would return <br>+ &nbsp; &nbsp; * false regardless of whether the path was in the blacklist. <br>+ &nbsp; &nbsp; * Alternatively, if the blacklist specified an order of DENY, ALLOW, it could <br>+ &nbsp; &nbsp; * return true from accessAllowed if the resource was not explicitly listed in its <br>+ &nbsp; &nbsp; * blacklist. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;boolean accessAllowed(String resourcePath); <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * <br>+ &nbsp; &nbsp; * @param resourcePath <br>+ &nbsp; &nbsp; * @return true if access is explicitly prohibited for the path. False otherwise. <br>+ &nbsp; &nbsp; * For example, a whitelist implementation would return true if the resource was <br>+ &nbsp; &nbsp; * not explicitly listed, and false otherwise. A blacklist implementation would <br>+ &nbsp; &nbsp; * return true if the resource was explicitly denied, and false otherwise. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;boolean accessDenied(String resourcePath); <br>+} <br><br>Modified: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java?rev=834167&r1=834166&r2=834167&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java?rev=834167&r1=834166&r2=834167&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java (original) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -303,6 +303,9 @@ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(PageRenderLinkSource.class, PageRenderLinkSourceImpl.class); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(ClientInfrastructure.class, ClientInfrastructureImpl.class); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(URLRewriter.class, URLRewriterImpl.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(Dispatcher.class, AssetProtectionDispatcher.class).withId(&quot;AssetProtectionDispatcher&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(AssetPathAuthorizer.class, WhitelistAuthorizer.class).withId(&quot;WhitelistAuthorizer&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(AssetPathAuthorizer.class, RegexAuthorizer.class).withId(&quot;RegexAuthorizer&quot;); <br>&nbsp; &nbsp; &nbsp;} <br>&nbsp; <br>&nbsp; &nbsp; &nbsp;// ======================================================================== <br>@@ -1548,13 +1551,17 @@ <br>&nbsp; &nbsp; &nbsp; * and forwards onto {@link PageRenderRequestHandler}&lt;/dd&gt; &lt;dt&gt;ComponentEvent&lt;/dt&gt; &lt;dd&gt;Identifies the {@link <br>&nbsp; &nbsp; &nbsp; * ComponentEventRequestParameters} and forwards onto the {@link ComponentEventRequestHandler}&lt;/dd&gt; &lt;/dl&gt; <br>&nbsp; &nbsp; &nbsp; */ <br>- &nbsp; &nbsp;public static void contributeMasterDispatcher(OrderedConfiguration&lt;Dispatcher&gt; configuration) <br>+ &nbsp; &nbsp;public static void contributeMasterDispatcher(OrderedConfiguration&lt;Dispatcher&gt; configuration, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;AssetProtectionDispatcher&quot;) Dispatcher assetProt) <br>&nbsp; &nbsp; &nbsp;{ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// Looks for the root path and renders the start page. This is maintained for compatibility <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// with earlier versions of Tapestry 5, it is recommended that an Index page be used instead. <br>&nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;configuration.addInstance(&quot;RootPath&quot;, RootPathDispatcher.class, &quot;before:Asset&quot;); <br>&nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//this goes before asset to make sure that only allowed assets are streamed to the client. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;AssetProtection&quot;, assetProt, &quot;before:Asset&quot;); <br>+ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// This goes first because an asset to be streamed may have an file extension, such as <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// &quot;.html&quot;, that will confuse the later dispatchers. <br>&nbsp; <br>@@ -2405,4 +2412,41 @@ <br>&nbsp; <br>&nbsp; &nbsp; &nbsp;} <br>&nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Contributes the default set of AssetPathAuthorizers into the AssetProtectionDispatcher. <br>+ &nbsp; &nbsp; * @param whitelist authorization based on explicit whitelisting. <br>+ &nbsp; &nbsp; * @param regex authorization based on pattern matching. <br>+ &nbsp; &nbsp; * @param conf <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;public static void contributeAssetProtectionDispatcher( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;WhitelistAuthorizer&quot;) AssetPathAuthorizer whitelist, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;RegexAuthorizer&quot;) AssetPathAuthorizer regex, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;OrderedConfiguration&lt;AssetPathAuthorizer&gt; conf) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//putting whitelist after everything ensures that, in fact, nothing falls through. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//also ensures that whitelist gives other authorizers the chance to act... <br>+ &nbsp; &nbsp; &nbsp; &nbsp;conf.add(&quot;regex&quot;,regex,&quot;before:whitelist&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;conf.add(&quot;whitelist&quot;, whitelist,&quot;after:*&quot;); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public void contributeRegexAuthorizer(Configuration&lt;String&gt; regex, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.scriptaculous.path&quot;) String scriptPath, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.blackbird.path&quot;) String blackbirdPath, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.datepicker.path&quot;) String datepickerPath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//allow any js, jpg, jpeg, png, or css under org/chenillekit/tapstry. The funky bit of ([^/.]+/)* is what allows <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//multiple paths, while not allowing any of those paths to contains ./ or ../ thereby preventing paths like: <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//org/chenillekit/tapestry/../../../foo.js <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String pathPattern = &quot;([^/.]+/)*[^/.]+\\.((css)|(js)|(jpg)|(jpeg)|(png)|(gif))$&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;^org/chenillekit/tapestry/&quot; + pathPattern); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;^org/apache/tapestry5/&quot; + pathPattern); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(blackbirdPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(datepickerPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(scriptPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//allow access to virtual assets. Critical for tapestry-combined js files. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;virtual/&quot; + pathPattern); <br>+ &nbsp; &nbsp;} <br>+ <br>&nbsp;} <br><br>Modified: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java?rev=834167&r1=834166&r2=834167&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java?rev=834167&r1=834166&r2=834167&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java (original) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -255,4 +255,22 @@ <br>&nbsp; &nbsp; &nbsp;{ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;ReverseStringsWorker&quot;, new ReverseStringsWorker()); <br>&nbsp; &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public static void contributeRegexAuthorizer(Configuration&lt;String&gt; configuration) { <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//use this rather than a blanket regex (^.*.jpg$, etc.); want to be sure that tests pass from the default <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//configuration setup, (eg: this way, I realized that the &quot;virtual&quot; assets folder <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//needed to be opened up in the tapestry-provided contributions) rather than from some blanket configuration in the appmodule <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//opening up all css, js, etc. files. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//would contribute to whitelist except that the resource path between ctxt and the rest of the path can change. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/css/app\\.css$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/style\\.css$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/bg\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/header\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/rightsmall\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/rightbig\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/bottom\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/footer\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/images/tapestry_banner\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/images/asf_logo_wide\\.gif$&quot;); <br>+ &nbsp; &nbsp;} <br>&nbsp;} <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,92 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import static org.easymock.EasyMock.createMock; <br>+import static org.easymock.EasyMock.expect; <br>+import static org.easymock.EasyMock.*; <br>+ <br>+import java.io.IOException; <br>+import java.util.ArrayList; <br>+import java.util.Arrays; <br>+import java.util.Collections; <br>+import java.util.List; <br>+ <br>+import javax.servlet.http.HttpServletResponse; <br>+ <br>+import org.apache.tapestry5.internal.services.RequestConstants; <br>+import org.apache.tapestry5.internal.services.AssetProtectionDispatcher; <br>+import org.apache.tapestry5.services.ClasspathAssetAliasManager; <br>+import org.apache.tapestry5.services.Request; <br>+import org.apache.tapestry5.services.Response; <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.slf4j.Logger; <br>+ <br>+public class AssetProtectionDispatcherTest extends Assert <br>+{ <br>+ <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void ignores_nonassets() throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//shouldn't need any configuration here... <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths = Collections.emptyList(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Logger logger = createMock(Logger.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetProtectionDispatcher disp = new AssetProtectionDispatcher(auths,null,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Request request = createMock(Request.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(&quot;start&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Response response = createMock(Response.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;replay(request,response,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(disp.dispatch(request, response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;verify(request,response,logger); <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void checks_authorizers() throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Logger logger = createMock(Logger.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths = new ArrayList&lt;AssetPathAuthorizer&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetPathAuthorizer auth = createMock(AssetPathAuthorizer.class); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.order()).andReturn(Arrays.asList(AssetPathAuthorizer.Order.ALLOW, AssetPathAuthorizer.Order.DENY)).times(2); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessAllowed(&quot;/cayenne.xml&quot;)).andReturn(false); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessDenied(&quot;/cayenne.xml&quot;)).andReturn(true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessAllowed(&quot;/org/apache/tapestry/default.css&quot;)).andReturn(true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;auths.add(auth); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Denying access to /cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Allowing access to /org/apache/tapestry/default.css&quot;); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Request request = createMock(Request.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Response response = createMock(Response.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(RequestConstants.ASSET_PATH_PREFIX + &quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(RequestConstants.ASSET_PATH_PREFIX + &quot;/org/apache/tapestry/default.css&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;response.sendError(HttpServletResponse.SC_FORBIDDEN, &quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;ClasspathAssetAliasManager manager = createMock(ClasspathAssetAliasManager.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(manager.toResourcePath(RequestConstants.ASSET_PATH_PREFIX + &quot;/cayenne.xml&quot;)).andReturn(&quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(manager.toResourcePath( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;RequestConstants.ASSET_PATH_PREFIX + &quot;/org/apache/tapestry/default.css&quot;)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;.andReturn(&quot;/org/apache/tapestry/default.css&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;replay(auth,request,response,manager,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetProtectionDispatcher disp = new AssetProtectionDispatcher(auths,manager,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(disp.dispatch(request,response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(disp.dispatch(request, response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;verify(auth,request,response,logger); <br>+ &nbsp; &nbsp;} <br>+} <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,53 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.util.Arrays; <br>+import java.util.List; <br>+ <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.apache.tapestry5.internal.services.RegexAuthorizer; <br>+ <br>+public class RegexAuthorizerTest extends Assert <br>+{ <br>+ <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void test_regexes() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;String&gt; patterns = Arrays.asList(&quot;^.*\\.png$&quot;,&quot;^.*\\.jpg&quot;,&quot;^.*\\.jpeg&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;RegexAuthorizer auth = new RegexAuthorizer(patterns); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String pkg = &quot;assets/com/saiwaisolutions/resources/&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String png = pkg + &quot;foo.png&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String jpg = pkg + &quot;foo.jpg&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String jpeg = pkg + &quot;foo.jpeg&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String xml = pkg + &quot;foo.xml&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,png,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,jpg,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,jpeg,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,xml,false); <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private static void test(RegexAuthorizer auth, String one,boolean allowed) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.accessAllowed(one),allowed); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;auth.accessAllowed( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&quot;<a href="http://localhost:8080" target="_top" rel="nofollow">http://localhost:8080</a>&quot; + one), <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;allowed); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(one)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(&quot;<a href="http://localhost:8080" target="_top" rel="nofollow">http://localhost:8080</a>&quot; + one)); <br>+ &nbsp; &nbsp;} <br>+} <br><br>Added: tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java?rev=834167&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java?rev=834167&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java (added) <br>+++ tapestry/tapestry5/branches/5.1.0.x-dev/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java Mon Nov &nbsp;9 18:26:48 2009 <br>@@ -0,0 +1,45 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+/* <br>+ * Created on Jul 28, 2007 <br>+ * <br>+ * <br>+ */ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.util.Arrays; <br>+ <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.apache.tapestry5.internal.services.WhitelistAuthorizer; <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+public class WhitelistAuthorizerTest extends Assert { <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void run() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;WhitelistAuthorizer auth = new WhitelistAuthorizer(Arrays.asList(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().get(0), AssetPathAuthorizer.Order.ALLOW); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().get(1), AssetPathAuthorizer.Order.DENY); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().size(),2); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(auth.accessAllowed(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessAllowed(&quot;bar&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(auth.accessDenied(&quot;bar&quot;)); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---Dev-f339.html" embed="fixTarget[339]" target="_top" >Tapestry - Dev</a></p> tag:old.nabble.com,2006:post-26270226 2009-11-09T09:23:18Z 2009-11-09T09:23:18Z robertdzeigler Author: robertdzeigler <br>Date: Mon Nov &nbsp;9 17:23:10 2009 <br>New Revision: 834151 <br><br>URL: <a href="http://svn.apache.org/viewvc?rev=834151&view=rev" target="_top" rel="nofollow">http://svn.apache.org/viewvc?rev=834151&view=rev</a><br>Log: <br>TAP5-815: Asset dispatcher allows any file inside the webapp visible and downloadable (5.2 branch) <br><br>Added: <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java <br>Modified: <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/src/site/apt/guide/assets.apt <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java <br>&nbsp; &nbsp; tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java <br><br>Modified: tapestry/tapestry5/trunk/src/site/apt/guide/assets.apt <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/src/site/apt/guide/assets.apt?rev=834151&r1=834150&r2=834151&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/src/site/apt/guide/assets.apt?rev=834151&r1=834150&r2=834151&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/src/site/apt/guide/assets.apt (original) <br>+++ tapestry/tapestry5/trunk/src/site/apt/guide/assets.apt Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -138,6 +138,31 @@ <br>&nbsp; &nbsp;In addition, context assets will use the URL prefix &lt;&lt;&lt;/assets/ctx/&gt;&gt;&gt;&lt;app-version&gt;&lt;&lt;&lt;/&gt;&gt;&gt;. <br>&nbsp; <br>&nbsp; <br>+Securing Assets <br>+ <br>+ &nbsp;Securing assets is an important consideration for any web application. &nbsp;Many assets, such as hibernate configuration <br>+ &nbsp;files, sit in the classpath and are exposable via the Asset service, which is not desirable. &nbsp;To protect these and <br>+ &nbsp;other sensitive assets, Tapestry provides the AssetProtectionDispatcher. &nbsp;This dispatcher sits in front of the <br>+ &nbsp;AssetDispatcher, the service responsible for streaming assets to the client, and watches for Asset requests. <br>+ &nbsp;When an asset request comes in, the protection dispatcher checks for authorization to view the file against a <br>+ &nbsp;contributed list of AssetPathAuthorizer implementations. &nbsp;Determination of whether the client can view the requested <br>+ &nbsp;resource is then made based on whether any of the contributed AssetPathAuthorizer implementations explicitly allowed <br>+ &nbsp;or denied access to the resource. <br>+ <br>+ &nbsp;Tapestry provides two AssetPathAuthorizer implemenations &quot;out of the box&quot; to which users may contribute: RegexAuthorizer <br>+ &nbsp;and WhitelistAuthorizer. &nbsp;RegexAuthorizer uses regular expressions to determine assets which are viewable by the <br>+ &nbsp;client; any assets that match one of its (contributed) regular expressions are authorized. Anything not matched is <br>+ &nbsp;passed through to the WhitelistAuthorizer. &nbsp;WhitelistAuthorizer uses an exact-matching whitelist. &nbsp;Anything matching <br>+ &nbsp;exactly one its contributions is allowed; all other asset requests are denied. &nbsp;The default tapestry configuration <br>+ &nbsp;contributes nothing to WhitelistAuthorizer (access will be denied to all asset requests passed through to it), and <br>+ &nbsp;explicitly allows access to css, jpg, jpeg, js, png, and gif files associated with tapestry (tapestry.js, blackbird <br>+ &nbsp;files, date picker files, etc.). &nbsp;The default contribution also enables access to the css, jpg, jpeg, js, png, and gif <br>+ &nbsp;files provided by the popular chenille-kit 3rd party library. The default configuration denies access to all other <br>+ &nbsp;assets. &nbsp;To enable access to your application's assets, either contribute a custom AssetPathAnalyzer, or contribute <br>+ &nbsp;appropriate regular expression or exact path contributions to RegexAuthorizer or WhitelistAuthorizer, respectively. <br>+ &nbsp;See TapestryModule.contribteRegexAuthorizer for examples. <br>+ &nbsp; <br>+ <br>&nbsp;Performance Notes <br>&nbsp; <br>&nbsp; &nbsp;Assets are expected to be entirely static (not changing while the application is deployed). When Tapestry generates a URL <br>@@ -146,4 +171,4 @@ <br>&nbsp; &nbsp;asset. <br>&nbsp; <br>&nbsp; &nbsp;In addition, Tapestry will {{{compress.html}GZIP compress}} the content of &lt;all&gt; assets (if the asset <br>- &nbsp;is compressable, and the client supports it). <br>\ No newline at end of file <br>+ &nbsp;is compressable, and the client supports it). <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcher.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,92 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.io.IOException; <br>+import java.util.Collection; <br>+import java.util.Collections; <br>+import java.util.List; <br>+ <br>+import javax.servlet.http.HttpServletResponse; <br>+ <br>+import org.apache.tapestry5.internal.services.RequestConstants; <br>+import org.apache.tapestry5.services.*; <br>+import org.slf4j.Logger; <br>+ <br>+/** <br>+ * Dispatcher that handles whether to allow or deny access to particular <br>+ * assets. Actual work of authorizing a particular url is handled by <br>+ * implementations of AssetPathAuthorizer. Configuration is an ordered <br>+ * list of AssetPathAuthorizers. &nbsp;Each authorizer specifies an order of <br>+ * operations as a list (see AssetPathAuthorizer.Order). <br>+ * <br>+ */ <br>+public class AssetProtectionDispatcher implements Dispatcher <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private final Collection&lt;AssetPathAuthorizer&gt; authorizers; <br>+ &nbsp; &nbsp;private final ClasspathAssetAliasManager assetAliasManager; <br>+ &nbsp; &nbsp;private final Logger logger; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public AssetProtectionDispatcher( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;ClasspathAssetAliasManager manager, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Logger logger) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.authorizers = Collections.unmodifiableList(auths); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.assetAliasManager = manager; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;this.logger = logger; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean dispatch(Request request, Response response) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String path = request.getPath(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//we only protect assets, and don't examine any other url's. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;if (!path.startsWith(RequestConstants.ASSET_PATH_PREFIX)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String resourcePath = assetAliasManager.toResourcePath(path); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(AssetPathAuthorizer auth : authorizers) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;for(AssetPathAuthorizer.Order o : auth.order()) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (o == AssetPathAuthorizer.Order.ALLOW) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (auth.accessAllowed(resourcePath)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Allowing access to &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;else <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (auth.accessDenied(resourcePath)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Denying access to &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;response.sendError(HttpServletResponse.SC_FORBIDDEN,resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return true; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//if we get here, no Authorizer had anything useful to say about the resourcePath. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//so let it fall through. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Fell through the list of authorizers. Allowing access to: &quot; + resourcePath); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RegexAuthorizer.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,76 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+import java.util.ArrayList; <br>+import java.util.Arrays; <br>+import java.util.Collection; <br>+import java.util.Collections; <br>+import java.util.List; <br>+import java.util.regex.Pattern; <br>+ <br>+/** <br>+ * Provides a regex-based authorization scheme for asset-access authorization. <br>+ * Note that this implementation doesn't actually deny access to anything. <br>+ * But it's placement within the chain of command of authorizers is just before <br>+ * the whitelist authorizer, which has an explicit deny policy. <br>+ * Hence, as long as the whitelist authorizer is being used in conjunction with <br>+ * the regex authorizer, there is no need to worry about accessDenied in this authorizer. <br>+ * <br>+ */ <br>+public class RegexAuthorizer implements AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private final Collection&lt;Pattern&gt; _regexes; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public RegexAuthorizer(final Collection&lt;String&gt; regex) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//an alternate way to construct this would be to make sure that each pattern is grouped <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//and then to regex or the various patterns together into a single pattern. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//that might be faster, but probably not enough to make a difference, and this is cleaner. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;Pattern&gt; tmp = new ArrayList&lt;Pattern&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(String exp : regex) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;tmp.add(Pattern.compile(exp)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;_regexes = Collections.unmodifiableCollection(tmp); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessAllowed(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(Pattern regex : _regexes) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (regex.matcher(resourcePath).matches()) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return true; <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessDenied(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return false; <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public List&lt;Order&gt; order() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return Arrays.asList(Order.ALLOW); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/WhitelistAuthorizer.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,59 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+import java.util.Arrays; <br>+import java.util.Collection; <br>+import java.util.List; <br>+import java.util.Map; <br>+import java.util.concurrent.ConcurrentHashMap; <br>+ <br>+/** <br>+ * AssetPathAuthorizer that determines access rights based on exact matching to a contributed whitelist. <br>+ * Any resource not explicitly specified in the whitelist is denied access. <br>+ */ <br>+public class WhitelistAuthorizer implements AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public List&lt;Order&gt; order() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return Arrays.asList(Order.ALLOW, Order.DENY); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;//hash the resource paths for fast lookups. <br>+ &nbsp; &nbsp;private final Map&lt;String, Boolean&gt; _paths; <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public WhitelistAuthorizer(Collection&lt;String&gt; paths) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;_paths = new ConcurrentHashMap&lt;String, Boolean&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;for(String path : paths) <br>+ &nbsp; &nbsp; &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;_paths.put(path, true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;} <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;public boolean accessAllowed(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return (_paths.containsKey(resourcePath)); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public boolean accessDenied(String resourcePath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;return !_paths.containsKey(resourcePath); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/AssetPathAuthorizer.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,76 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.services; <br>+ <br>+import java.util.List; <br>+ <br>+/** <br>+ * Determines whether access to an asset is allowed, denied, or undetermined. <br>+ * Each contributed authorizer makes up part of a chain of command for determining access. <br>+ * Access is explicitly allowed if accessAllowed returns true. <br>+ * Access is explicitly denied if accessDenied returns true. <br>+ * Ordering depends on the order specified by the &quot;order&quot; parameter. <br>+ * Hence, an implementation which specifies an order of: <br>+ * ALLOW, DENY, and returns true from both accessAllowed and accessDenied <br>+ * will allow access for all resources. With the same return values for the <br>+ * access* methods but the order switched to DENY, ALLOW, access to all resources <br>+ * would be denied. &nbsp;It is possible for an authorizer to have &quot;nothing <br>+ * to say&quot; regarding a particular resource. &nbsp;If accessAllowed returns false, <br>+ * it does not mean that access is denied, merely that it is not explicitly allowed. <br>+ * If accessDenied returns false, it does not mean that access is allowed, merely that <br>+ * it is not explicitly denied. &nbsp;Hence, if both accessAllowed and accessDenied return false, <br>+ * control will pass to the next authorizer in the chain. <br>+ * <br>+ */ <br>+public interface AssetPathAuthorizer <br>+{ <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Types of orderings, either ALLOW or DENY. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;enum Order {ALLOW, DENY;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Specify the ordering for this authorizer. <br>+ &nbsp; &nbsp; * @return the operations for this authorizer. <br>+ &nbsp; &nbsp; * Operations will be performed in the order returned by the iterator. <br>+ &nbsp; &nbsp; * It is assumed that the authorizer correctly implements each form of <br>+ &nbsp; &nbsp; * ordering returned. It is acceptable to only return only ALLOW or DENY. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;List&lt;Order&gt; order(); <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Determines whether a request to &quot;resourcePath&quot; is allowed. <br>+ &nbsp; &nbsp; * @param resourcePath <br>+ &nbsp; &nbsp; * @return true if access is explicitly allowed for the path. False otherwise. <br>+ &nbsp; &nbsp; * For example, a whitelist implementation would return true if the resource <br>+ &nbsp; &nbsp; * was listed, and false otherwise. &nbsp;A blacklist implementation would return <br>+ &nbsp; &nbsp; * false regardless of whether the path was in the blacklist. <br>+ &nbsp; &nbsp; * Alternatively, if the blacklist specified an order of DENY, ALLOW, it could <br>+ &nbsp; &nbsp; * return true from accessAllowed if the resource was not explicitly listed in its <br>+ &nbsp; &nbsp; * blacklist. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;boolean accessAllowed(String resourcePath); <br>+ <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * <br>+ &nbsp; &nbsp; * @param resourcePath <br>+ &nbsp; &nbsp; * @return true if access is explicitly prohibited for the path. False otherwise. <br>+ &nbsp; &nbsp; * For example, a whitelist implementation would return true if the resource was <br>+ &nbsp; &nbsp; * not explicitly listed, and false otherwise. A blacklist implementation would <br>+ &nbsp; &nbsp; * return true if the resource was explicitly denied, and false otherwise. <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;boolean accessDenied(String resourcePath); <br>+} <br><br>Modified: tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java?rev=834151&r1=834150&r2=834151&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java?rev=834151&r1=834150&r2=834151&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java (original) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -305,6 +305,9 @@ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(PageRenderLinkSource.class, PageRenderLinkSourceImpl.class); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(ClientInfrastructure.class, ClientInfrastructureImpl.class); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(URLRewriter.class, URLRewriterImpl.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(Dispatcher.class, AssetProtectionDispatcher.class).withId(&quot;AssetProtectionDispatcher&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(AssetPathAuthorizer.class, WhitelistAuthorizer.class).withId(&quot;WhitelistAuthorizer&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;binder.bind(AssetPathAuthorizer.class, RegexAuthorizer.class).withId(&quot;RegexAuthorizer&quot;); <br>&nbsp; &nbsp; &nbsp;} <br>&nbsp; <br>&nbsp; &nbsp; &nbsp;// ======================================================================== <br>@@ -1572,13 +1575,17 @@ <br>&nbsp; &nbsp; &nbsp; * and forwards onto {@link PageRenderRequestHandler}&lt;/dd&gt; &lt;dt&gt;ComponentEvent&lt;/dt&gt; &lt;dd&gt;Identifies the {@link <br>&nbsp; &nbsp; &nbsp; * ComponentEventRequestParameters} and forwards onto the {@link ComponentEventRequestHandler}&lt;/dd&gt; &lt;/dl&gt; <br>&nbsp; &nbsp; &nbsp; */ <br>- &nbsp; &nbsp;public static void contributeMasterDispatcher(OrderedConfiguration&lt;Dispatcher&gt; configuration) <br>+ &nbsp; &nbsp;public static void contributeMasterDispatcher(OrderedConfiguration&lt;Dispatcher&gt; configuration, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;AssetProtectionDispatcher&quot;) Dispatcher assetProt) <br>&nbsp; &nbsp; &nbsp;{ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// Looks for the root path and renders the start page. This is maintained for compatibility <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// with earlier versions of Tapestry 5, it is recommended that an Index page be used instead. <br>&nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;configuration.addInstance(&quot;RootPath&quot;, RootPathDispatcher.class, &quot;before:Asset&quot;); <br>&nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//this goes before asset to make sure that only allowed assets are streamed to the client. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;AssetProtection&quot;, assetProt, &quot;before:Asset&quot;); <br>+ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// This goes first because an asset to be streamed may have an file extension, such as <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;// &quot;.html&quot;, that will confuse the later dispatchers. <br>&nbsp; <br>@@ -1591,6 +1598,7 @@ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;configuration.addInstance(&quot;PageRender&quot;, PageRenderDispatcher.class); <br>&nbsp; &nbsp; &nbsp;} <br>&nbsp; <br>+ <br>&nbsp; &nbsp; &nbsp;/** <br>&nbsp; &nbsp; &nbsp; * Contributes a default object renderer for type Object, plus specialized renderers for {@link <br>&nbsp; &nbsp; &nbsp; * org.apache.tapestry5.services.Request}, {@link org.apache.tapestry5.ioc.Location}, {@link <br>@@ -2480,4 +2488,41 @@ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;}; <br>&nbsp; &nbsp; &nbsp;} <br>&nbsp; <br>+ &nbsp; &nbsp;/** <br>+ &nbsp; &nbsp; * Contributes the default set of AssetPathAuthorizers into the AssetProtectionDispatcher. <br>+ &nbsp; &nbsp; * @param whitelist authorization based on explicit whitelisting. <br>+ &nbsp; &nbsp; * @param regex authorization based on pattern matching. <br>+ &nbsp; &nbsp; * @param conf <br>+ &nbsp; &nbsp; */ <br>+ &nbsp; &nbsp;public static void contributeAssetProtectionDispatcher( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;WhitelistAuthorizer&quot;) AssetPathAuthorizer whitelist, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@InjectService(&quot;RegexAuthorizer&quot;) AssetPathAuthorizer regex, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;OrderedConfiguration&lt;AssetPathAuthorizer&gt; conf) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//putting whitelist after everything ensures that, in fact, nothing falls through. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//also ensures that whitelist gives other authorizers the chance to act... <br>+ &nbsp; &nbsp; &nbsp; &nbsp;conf.add(&quot;regex&quot;,regex,&quot;before:whitelist&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;conf.add(&quot;whitelist&quot;, whitelist,&quot;after:*&quot;); <br>+ &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public void contributeRegexAuthorizer(Configuration&lt;String&gt; regex, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.scriptaculous.path&quot;) String scriptPath, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.blackbird.path&quot;) String blackbirdPath, <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;@Symbol(&quot;tapestry.datepicker.path&quot;) String datepickerPath) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//allow any js, jpg, jpeg, png, or css under org/chenillekit/tapstry. The funky bit of ([^/.]+/)* is what allows <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//multiple paths, while not allowing any of those paths to contains ./ or ../ thereby preventing paths like: <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//org/chenillekit/tapestry/../../../foo.js <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String pathPattern = &quot;([^/.]+/)*[^/.]+\\.((css)|(js)|(jpg)|(jpeg)|(png)|(gif))$&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;^org/chenillekit/tapestry/&quot; + pathPattern); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;^org/apache/tapestry5/&quot; + pathPattern); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(blackbirdPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(datepickerPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(scriptPath + &quot;/&quot; + pathPattern); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//allow access to virtual assets. Critical for tapestry-combined js files. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;regex.add(&quot;virtual/&quot; + pathPattern); <br>+ &nbsp; &nbsp;} <br>+ <br>&nbsp;} <br><br>Modified: tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java?rev=834151&r1=834150&r2=834151&view=diff" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java?rev=834151&r1=834150&r2=834151&view=diff</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java (original) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/integration/app1/services/AppModule.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -257,4 +257,22 @@ <br>&nbsp; &nbsp; &nbsp;{ <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;ReverseStringsWorker&quot;, new ReverseStringsWorker()); <br>&nbsp; &nbsp; &nbsp;} <br>+ <br>+ &nbsp; &nbsp;public static void contributeRegexAuthorizer(Configuration&lt;String&gt; configuration) { <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//use this rather than a blanket regex (^.*.jpg$, etc.); want to be sure that tests pass from the default <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//configuration setup, (eg: this way, I realized that the &quot;virtual&quot; assets folder <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//needed to be opened up in the tapestry-provided contributions) rather than from some blanket configuration in the appmodule <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//opening up all css, js, etc. files. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//would contribute to whitelist except that the resource path between ctxt and the rest of the path can change. <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/css/app\\.css$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/style\\.css$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/bg\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/header\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/rightsmall\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/rightbig\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/bottom\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/layout/images/footer\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/images/tapestry_banner\\.gif$&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;configuration.add(&quot;^ctx/[^/]+/images/asf_logo_wide\\.gif$&quot;); <br>+ &nbsp; &nbsp;} <br>&nbsp;} <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/AssetProtectionDispatcherTest.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,92 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import static org.easymock.EasyMock.createMock; <br>+import static org.easymock.EasyMock.expect; <br>+import static org.easymock.EasyMock.*; <br>+ <br>+import java.io.IOException; <br>+import java.util.ArrayList; <br>+import java.util.Arrays; <br>+import java.util.Collections; <br>+import java.util.List; <br>+ <br>+import javax.servlet.http.HttpServletResponse; <br>+ <br>+import org.apache.tapestry5.internal.services.RequestConstants; <br>+import org.apache.tapestry5.internal.services.AssetProtectionDispatcher; <br>+import org.apache.tapestry5.services.ClasspathAssetAliasManager; <br>+import org.apache.tapestry5.services.Request; <br>+import org.apache.tapestry5.services.Response; <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.slf4j.Logger; <br>+ <br>+public class AssetProtectionDispatcherTest extends Assert <br>+{ <br>+ <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void ignores_nonassets() throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;//shouldn't need any configuration here... <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths = Collections.emptyList(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Logger logger = createMock(Logger.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetProtectionDispatcher disp = new AssetProtectionDispatcher(auths,null,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Request request = createMock(Request.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(&quot;start&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Response response = createMock(Response.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;replay(request,response,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(disp.dispatch(request, response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;verify(request,response,logger); <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void checks_authorizers() throws IOException <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Logger logger = createMock(Logger.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;AssetPathAuthorizer&gt; auths = new ArrayList&lt;AssetPathAuthorizer&gt;(); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetPathAuthorizer auth = createMock(AssetPathAuthorizer.class); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.order()).andReturn(Arrays.asList(AssetPathAuthorizer.Order.ALLOW, AssetPathAuthorizer.Order.DENY)).times(2); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessAllowed(&quot;/cayenne.xml&quot;)).andReturn(false); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessDenied(&quot;/cayenne.xml&quot;)).andReturn(true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(auth.accessAllowed(&quot;/org/apache/tapestry/default.css&quot;)).andReturn(true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;auths.add(auth); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Denying access to /cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;logger.debug(&quot;Allowing access to /org/apache/tapestry/default.css&quot;); <br>+ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Request request = createMock(Request.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;Response response = createMock(Response.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(RequestConstants.ASSET_PATH_PREFIX + &quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(request.getPath()).andReturn(RequestConstants.ASSET_PATH_PREFIX + &quot;/org/apache/tapestry/default.css&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;response.sendError(HttpServletResponse.SC_FORBIDDEN, &quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;ClasspathAssetAliasManager manager = createMock(ClasspathAssetAliasManager.class); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(manager.toResourcePath(RequestConstants.ASSET_PATH_PREFIX + &quot;/cayenne.xml&quot;)).andReturn(&quot;/cayenne.xml&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;expect(manager.toResourcePath( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;RequestConstants.ASSET_PATH_PREFIX + &quot;/org/apache/tapestry/default.css&quot;)) <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;.andReturn(&quot;/org/apache/tapestry/default.css&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;replay(auth,request,response,manager,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;AssetProtectionDispatcher disp = new AssetProtectionDispatcher(auths,manager,logger); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(disp.dispatch(request,response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(disp.dispatch(request, response)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;verify(auth,request,response,logger); <br>+ &nbsp; &nbsp;} <br>+} <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/RegexAuthorizerTest.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,53 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.util.Arrays; <br>+import java.util.List; <br>+ <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.apache.tapestry5.internal.services.RegexAuthorizer; <br>+ <br>+public class RegexAuthorizerTest extends Assert <br>+{ <br>+ <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void test_regexes() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;List&lt;String&gt; patterns = Arrays.asList(&quot;^.*\\.png$&quot;,&quot;^.*\\.jpg&quot;,&quot;^.*\\.jpeg&quot;); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;RegexAuthorizer auth = new RegexAuthorizer(patterns); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String pkg = &quot;assets/com/saiwaisolutions/resources/&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String png = pkg + &quot;foo.png&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String jpg = pkg + &quot;foo.jpg&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String jpeg = pkg + &quot;foo.jpeg&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;String xml = pkg + &quot;foo.xml&quot;; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,png,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,jpg,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,jpeg,true); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;test(auth,xml,false); <br>+ &nbsp; &nbsp;} <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;private static void test(RegexAuthorizer auth, String one,boolean allowed) <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.accessAllowed(one),allowed); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;auth.accessAllowed( <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&quot;<a href="http://localhost:8080" target="_top" rel="nofollow">http://localhost:8080</a>&quot; + one), <br>+ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;allowed); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(one)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(&quot;<a href="http://localhost:8080" target="_top" rel="nofollow">http://localhost:8080</a>&quot; + one)); <br>+ &nbsp; &nbsp;} <br>+} <br><br>Added: tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java <br>URL: <a href="http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java?rev=834151&view=auto" target="_top" rel="nofollow">http://svn.apache.org/viewvc/tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java?rev=834151&view=auto</a><br>============================================================================== <br>--- tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java (added) <br>+++ tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/WhitelistAuthorizerTest.java Mon Nov &nbsp;9 17:23:10 2009 <br>@@ -0,0 +1,45 @@ <br>+// Copyright 2009 The Apache Software Foundation <br>+// <br>+// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;); <br>+// you may not use this file except in compliance with the License. <br>+// You may obtain a copy of the License at <br>+// <br>+// &nbsp; &nbsp; &nbsp;<a href="http://www.apache.org/licenses/LICENSE-2.0" target="_top" rel="nofollow">http://www.apache.org/licenses/LICENSE-2.0</a><br>+// <br>+// Unless required by applicable law or agreed to in writing, software <br>+// distributed under the License is distributed on an &quot;AS IS&quot; BASIS, <br>+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. <br>+// See the License for the specific language governing permissions and <br>+// limitations under the License. <br>+ <br>+/* <br>+ * Created on Jul 28, 2007 <br>+ * <br>+ * <br>+ */ <br>+package org.apache.tapestry5.internal.services; <br>+ <br>+import java.util.Arrays; <br>+ <br>+import org.testng.Assert; <br>+import org.testng.annotations.Test; <br>+import org.apache.tapestry5.internal.services.WhitelistAuthorizer; <br>+import org.apache.tapestry5.services.AssetPathAuthorizer; <br>+ <br>+public class WhitelistAuthorizerTest extends Assert { <br>+ &nbsp; &nbsp; <br>+ &nbsp; &nbsp;@Test <br>+ &nbsp; &nbsp;public void run() <br>+ &nbsp; &nbsp;{ <br>+ &nbsp; &nbsp; &nbsp; &nbsp;WhitelistAuthorizer auth = new WhitelistAuthorizer(Arrays.asList(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().get(0), AssetPathAuthorizer.Order.ALLOW); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().get(1), AssetPathAuthorizer.Order.DENY); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertEquals(auth.order().size(),2); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(auth.accessAllowed(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessDenied(&quot;foo&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp; <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertFalse(auth.accessAllowed(&quot;bar&quot;)); <br>+ &nbsp; &nbsp; &nbsp; &nbsp;assertTrue(auth.accessDenied(&quot;bar&quot;)); <br>+ &nbsp; &nbsp;} <br>+ <br>+} <br><br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---Dev-f339.html" embed="fixTarget[339]" target="_top" >Tapestry - Dev</a></p> tag:old.nabble.com,2006:post-26269707 2009-11-09T08:52:48Z 2009-11-09T08:52:48Z Howard Lewis Ship Please take this to the users mailing list; this is the developer <br>list, used to discuss framework development (not user support). You'll <br>get a faster answer there. <br><br>On Mon, Nov 9, 2009 at 7:02 AM, Rayden30 <br>&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269707&i=0" target="_top" rel="nofollow">dmourereau.ext@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; <br>&gt; Hello, <br>&gt; <br>&gt; <br>&gt; First I m a beginer in Tapestry... Actually I m developping a webview which <br>&gt; has to display an ordered array as below: <br>&gt; <br>&gt; Root 1 <br>&gt; Root 2 <br>&gt; Root 3 <br>&gt;  |----Child1 <br>&gt;  |----Child2 <br>&gt;           |---Child 2.1 <br>&gt;           |---Child 2.2 <br>&gt; .... <br>&gt; ... <br>&gt; <br>&gt; My code in local working perfectly... However when I intrated in my tapestry <br>&gt; application it idisplays the following exception: <br>&gt; <br>&gt; Tag &lt;&gt; on line 158 contains more than one 'valuebool' attribute. <br>&gt; <br>&gt; I checked on webview and there is no tags which are using this variable <br>&gt; name. I try to rename in toto. And the results is the same: <br>&gt; <br>&gt; Below you can see the code: <br>&gt; <br>&gt; In bold where Apache detects an exception. <br>&gt; <br>&gt;                function clear(result) <br>&gt;                { <br>&gt; <br>&gt;                                var res= result.replace('&quot;',''); <br>&gt;                                var res= res.replace('&quot;',''); <br>&gt;                                var res= res.replace('[',''); <br>&gt;                                var res= res.replace(']',''); <br>&gt;                                var res= res.replace('[',''); <br>&gt;                                var res= res.replace(']',''); <br>&gt; <br>&gt;                                return res; <br>&gt; <br>&gt;                } <br>&gt;                function who_is_root(tab_result) <br>&gt;                { <br>&gt; <br>&gt;                var i=3; <br>&gt;                var root=new Array(); <br>&gt;                var y=0; <br>&gt;                var valuebool; <br>&gt;                var z; <br>&gt;                        while (i &lt; tab_result.length) <br>&gt;                        { <br>&gt; <br>&gt;                        var id_parent=clear(tab_result[i]); <br>&gt;                        valuebool=false; <br>&gt;                        z=1; <br>&gt; <br>&gt; <br>&gt;                                        while (z &lt; tab_result.length) <br>&gt;                                        { <br>&gt;                                                if(clear(tab_result[z])==id_parent) <br>&gt;                                                { <br>&gt;                                                // An exception is up <br>&gt; <br>&gt;                                                valuebool=true; <br>&gt; <br>&gt;                                                } <br>&gt;                                                 //Sometimes the exception is up for z variables <br>&gt;                                                z=z+4; <br>&gt; <br>&gt;                                        } <br>&gt; <br>&gt;                                        if (!valuebool) <br>&gt;                                        { <br>&gt; <br>&gt;                                        root[y]=clear(tab_result[i-3]); <br>&gt;                                        root[y+1]=clear(tab_result[i-2]); <br>&gt;                                        root[y+2]=clear(tab_result[i-1]); <br>&gt;                                        root[y+3]=clear(tab_result[i]); <br>&gt; <br>&gt;                                        y=y+4; <br>&gt;                                        } <br>&gt; <br>&gt;                        i=i+4; <br>&gt; <br>&gt;                        } <br>&gt; <br>&gt;                return(root); <br>&gt; <br>&gt;                } <br>&gt; <br>&gt;                function afficher_enfant(id_root,y,result) <br>&gt;                { <br>&gt; <br>&gt; <br>&gt; <br>&gt;                        if (y &lt;result.length) <br>&gt;                        { <br>&gt; <br>&gt; <br>&gt;                                if(id_root==clear(result[y])) <br>&gt;                                { <br>&gt;                                //Afficher l'enfant ci-dessous <br>&gt;                                document.write(&quot;&lt;tr&gt;&quot;); <br>&gt;                                document.write(&quot;&lt;td&gt;&quot; + clear(result[y-3]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                                document.write(&quot;&lt;td&gt;&quot; + clear(result[y-2]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                                document.write(&quot;&lt;td&gt;&quot; + clear(result[y-1]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                                document.write(&quot;&lt;td&gt;&quot; + clear(result[y]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                                document.write(&quot;&lt;/tr&gt;&quot;); <br>&gt; <br>&gt;                                } <br>&gt; <br>&gt;                        y=y+4; <br>&gt; <br>&gt;                        afficher_enfant(id_root,y,result); <br>&gt; <br>&gt;                        } <br>&gt; <br>&gt;                } <br>&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt;  function afficher_ma_config(code,result) <br>&gt;  { <br>&gt;        result=result.split(&quot;,&quot;); <br>&gt;        var tab_root=who_is_root(result); <br>&gt; <br>&gt;        var i=1; <br>&gt; <br>&gt;        document.write(&quot;&lt;table align='center' class='tablesorter'&gt;&quot;); <br>&gt;        document.write(&quot;&lt;thead&gt;&lt;tr &gt;&lt;td&gt;Zone <br>&gt; List&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;th&gt;Name&lt;/th&gt;&lt;th&gt;ID&lt;/th&gt;&lt;th&gt;Type&lt;/th&gt;&lt;th&gt;Parents&lt;/th&gt;&lt;/tr&gt;&lt;/thead&gt;&quot;); <br>&gt;        document.write(&quot;&lt;tbody&gt;&quot;); <br>&gt; <br>&gt;                while(i&lt;tab_root.length) <br>&gt;                { <br>&gt; <br>&gt;                        document.write(&quot;&lt;tr&gt;&quot;); <br>&gt;                        document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i-1]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                        document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                        document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i+1]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                        document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i+2]) + &quot;&lt;/td&gt;&quot;); <br>&gt;                        document.write(&quot;&lt;/tr&gt;&quot;); <br>&gt;                        afficher_enfant(tab_root[i],3,result); <br>&gt; <br>&gt;                        i=i+4; <br>&gt; <br>&gt;                } <br>&gt; <br>&gt;        document.write(&quot;&lt;/tbody&gt;&quot;); <br>&gt;        document.write(&quot;&lt;/table&gt;&quot;); <br>&gt; <br>&gt;        } <br>&gt; <br>&gt;        var reqparam=&quot;<a href="http://10.192.168.2/zones/list" target="_top" rel="nofollow">http://10.192.168.2/zones/list</a>&quot;; <br>&gt; <br>&gt; <br>&gt;        triggerAction('listrules',[reqparam],afficher_ma_config,'text/html'); <br>&gt; <br>&gt; <br>&gt;  Thank you for answering to this question, <br>&gt; <br>&gt;  I think this subject was already underlined in either part of this forum <br>&gt; <br>&gt;  Best Regards, <br>&gt; <br>&gt; <br>&gt; -- <br>&gt; View this message in context: <a href="http://old.nabble.com/TemplateParseException%3A-Tag-%3C%3E-on-line-xxx-contains-more-than-one-%27y%27-attribute.-tp26267695p26267695.html" target="_top" rel="nofollow">http://old.nabble.com/TemplateParseException%3A-Tag-%3C%3E-on-line-xxx-contains-more-than-one-%27y%27-attribute.-tp26267695p26267695.html</a><br>&gt; Sent from the Tapestry - Dev mailing list archive at Nabble.com. <br>&gt; <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269707&i=1" target="_top" rel="nofollow">dev-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269707&i=2" target="_top" rel="nofollow">dev-help@...</a> <br>&gt; <br>&gt; </div><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269707&i=3" target="_top" rel="nofollow">dev-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269707&i=4" target="_top" rel="nofollow">dev-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---Dev-f339.html" embed="fixTarget[339]" target="_top" >Tapestry - Dev</a></p> tag:old.nabble.com,2006:post-26269675 2009-11-09T08:51:05Z 2009-11-09T08:51:05Z Paul Field-4 Or you can just create the URL manually with the parameter in your test: <br>tester.renderPage(&quot;mypage/1234&quot;); &nbsp; // 1234 is the id <br><br>- Paul <br><br><br>Igor Drobiazko &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269675&i=0" target="_top" rel="nofollow">igor.drobiazko@...</a>&gt; wrote on 09/11/2009 06:30:34: <br>&gt; Just create another page containg a link to target page and click on <br>&gt; it. The link can contain a context. <br><br>&gt; &gt; Basically, I'm looking to invoke a page <br>&gt; &gt; and pass it a request parameter. Is this possible? <br><br><br><br>--- <br><br>This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and delete this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. <br><br>Please refer to <a href="http://www.db.com/en/content/eu_disclosures.htm" target="_top" rel="nofollow">http://www.db.com/en/content/eu_disclosures.htm</a>&nbsp;for additional EU corporate and regulatory disclosures.<p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26269052 2009-11-09T08:13:04Z 2009-11-09T08:13:04Z DH-14 I am sorry that &quot;Object onValidate&quot; should be &quot;Object onValidateForm&quot;. <br><br>DH <br><br>----- Original Message ----- <br>From: &quot;João Pereira&quot; <br>To: &quot;Tapestry users&quot; &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269052&i=0" target="_top" rel="nofollow">users@...</a>&gt; <br>Sent: Monday, November 09, 2009 11:53 PM <br>Subject: Re: beaneditform question <br><br><br>Thank you. <br><br><br>On Mon, Nov 9, 2009 at 1:50 AM, DH &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269052&i=1" target="_top" rel="nofollow">ningdhcn@...</a>&gt; wrote: <br><div class='shrinkable-quote'><br>&gt; Hi <br>&gt; <br>&gt; Simple sample(t5.1): <br>&gt; <br>&gt; In tml: <br>&gt; &lt;form t:id=&quot;regForm&quot; t:type=&quot;beaneditform&quot; object=&quot;user&quot; <br>&gt; include=&quot;nick,firstName,lastName&quot; add=&quot;password,retypePassword&quot;&gt; <br>&gt; &nbsp; &nbsp;&lt;p:password&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:label for=&quot;password&quot;/&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:passwordfield t:id=&quot;password&quot; validate=&quot;required&quot;&gt; <br>&gt; &nbsp; &nbsp;&lt;/p:password&gt; <br>&gt; &nbsp; &nbsp;&lt;p:retypePassword&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:label for=&quot;retypePassword&quot;/&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:passwordfield t:id=&quot;retypePassword&quot; validate=&quot;required&quot;&gt; <br>&gt; &nbsp; &nbsp;&lt;/p:retypePassword&gt; <br>&gt; &lt;/form&gt; <br>&gt; <br>&gt; In java: <br>&gt; <br>&gt; @Component <br>&gt; private BeanEditForm regForm; <br>&gt; <br>&gt; @Property <br>&gt; private User user; // your user entity <br>&gt; <br>&gt; @Property <br>&gt; private String password; <br>&gt; <br>&gt; @Property <br>&gt; private String retypePassword; <br>&gt; <br>&gt; Object onValidate() { <br>&gt; &nbsp; &nbsp;if (!password.equals(retypePassword)) { <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;regForm.recordError(&quot;password and retypepassword must be == &quot;); <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;return this; // meaning validation failed <br>&gt; &nbsp; &nbsp;} <br>&gt; &nbsp; &nbsp;return null; // validation successfully. <br>&gt; } <br>&gt; <br>&gt; Object onSuccess() { <br>&gt; &nbsp; &nbsp;user.setPassword(encodeutil.encode(password)); <br>&gt; &nbsp; &nbsp;service.save(user); <br>&gt; &nbsp; &nbsp;return successpage or other; <br>&gt; } <br>&gt; <br>&gt; DH <br>&gt; <a href="http://www.gaonline.com.cn" target="_top" rel="nofollow">http://www.gaonline.com.cn</a></div><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26269137 2009-11-09T08:12:24Z 2009-11-09T08:12:24Z Howard Lewis Ship There's several options. <br><br>You can use the Tapestry Quickstart archetype (i.e., maven template). <br><br>You can use the Jumpstart which is a more complete application <br>template & tutorial. <br><br>Here's a small example I use in my presentations: <br><a href="http://github.com/hlship/t5intro" target="_top" rel="nofollow">http://github.com/hlship/t5intro</a><br><br>Please check the Tapestry web site for more links. <br><br>On Mon, Nov 9, 2009 at 7:55 AM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269137&i=0" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; wrote: <br>&gt; Hello all, <br>&gt; <br>&gt; Is there any fully functional Web application in Tapestry5 that can be used <br>&gt; as a guide to bootstrap our skills in Tapestry5? <br>&gt; <br>&gt; Thank you <br>&gt; <br><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269137&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269137&i=2" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26268958 2009-11-09T08:07:33Z 2009-11-09T08:07:33Z Howard Lewis Ship The container is organized for functionality, not performance, with <br>service lookups because lookups normally occur once. <br><br>Suggestion: create a &quot;lookup&quot; service that has getters for all the <br>other keys services you want. Inject those other services into its <br>implementation. Obtain it from the Registry. Store it in a global and <br>use that for non-service code to gain access to IoC services. <br><br>On Mon, Nov 9, 2009 at 2:15 AM, Adriaan Joubert &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268958&i=0" target="_top" rel="nofollow">adriaan.ml@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; Hi, <br>&gt; <br>&gt; we hit some performance issues using the tapestry IoC. The problem is <br>&gt; that we have legacy apps where we do need to do a lot of registry <br>&gt; look-ups - takes a while to rewrite everything to have services <br>&gt; injected via constructors everywhere. In our particular case we have a <br>&gt; few hundred services and in one instance a static call was replaced <br>&gt; with a registry look-up and a call on the service. It turns out that a <br>&gt; registry look-up is rather slower than we expected. <br>&gt; <br>&gt; A colleague has looked into this and says: <br>&gt; <br>&gt; &quot;We are having some performance issues with the getService() method in <br>&gt; the 'RegistryImpl' class. Looking at the source code it seems that there <br>&gt; are some linear list searches going on in there that could perhaps be <br>&gt; replaced by more efficient map lookups, if possible.&quot; <br>&gt; <br>&gt; Has anybody looked into the performance of the IoC? <br>&gt; <br>&gt; Thanks, <br>&gt; <br>&gt; Adriaan <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268958&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268958&i=2" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; </div><br><br><br>-- <br>Howard M. Lewis Ship <br><br>Creator of Apache Tapestry <br><br>The source for Tapestry training, mentoring and support. Contact me to <br>learn how I can get you up and productive in Tapestry fast! <br><br>(971) 678-5210 <br><a href="http://howardlewisship.com" target="_top" rel="nofollow">http://howardlewisship.com</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268958&i=3" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268958&i=4" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26268771 2009-11-09T07:55:50Z 2009-11-09T07:55:50Z Jonhy Pear Hello all, <br><br>Is there any fully functional Web application in Tapestry5 that can be used <br>as a guide to bootstrap our skills in Tapestry5? <br><br>Thank you <br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26268723 2009-11-09T07:53:08Z 2009-11-09T07:53:08Z J. mp Thank you. <br><br><br>On Mon, Nov 9, 2009 at 1:50 AM, DH &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268723&i=0" target="_top" rel="nofollow">ningdhcn@...</a>&gt; wrote: <br><div class='shrinkable-quote'><br>&gt; Hi <br>&gt; <br>&gt; Simple sample(t5.1): <br>&gt; <br>&gt; In tml: <br>&gt; &lt;form t:id=&quot;regForm&quot; t:type=&quot;beaneditform&quot; object=&quot;user&quot; <br>&gt; include=&quot;nick,firstName,lastName&quot; add=&quot;password,retypePassword&quot;&gt; <br>&gt; &nbsp; &nbsp;&lt;p:password&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:label for=&quot;password&quot;/&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:passwordfield t:id=&quot;password&quot; validate=&quot;required&quot;&gt; <br>&gt; &nbsp; &nbsp;&lt;/p:password&gt; <br>&gt; &nbsp; &nbsp;&lt;p:retypePassword&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:label for=&quot;retypePassword&quot;/&gt; <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;&lt;t:passwordfield t:id=&quot;retypePassword&quot; validate=&quot;required&quot;&gt; <br>&gt; &nbsp; &nbsp;&lt;/p:retypePassword&gt; <br>&gt; &lt;/form&gt; <br>&gt; <br>&gt; In java: <br>&gt; <br>&gt; @Component <br>&gt; private BeanEditForm regForm; <br>&gt; <br>&gt; @Property <br>&gt; private User user; // your user entity <br>&gt; <br>&gt; @Property <br>&gt; private String password; <br>&gt; <br>&gt; @Property <br>&gt; private String retypePassword; <br>&gt; <br>&gt; Object onValidate() { <br>&gt; &nbsp; &nbsp;if (!password.equals(retypePassword)) { <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;regForm.recordError(&quot;password and retypepassword must be == &quot;); <br>&gt; &nbsp; &nbsp; &nbsp; &nbsp;return this; // meaning validation failed <br>&gt; &nbsp; &nbsp;} <br>&gt; &nbsp; &nbsp;return null; // validation successfully. <br>&gt; } <br>&gt; <br>&gt; Object onSuccess() { <br>&gt; &nbsp; &nbsp;user.setPassword(encodeutil.encode(password)); <br>&gt; &nbsp; &nbsp;service.save(user); <br>&gt; &nbsp; &nbsp;return successpage or other; <br>&gt; } <br>&gt; <br>&gt; DH <br>&gt; <a href="http://www.gaonline.com.cn" target="_top" rel="nofollow">http://www.gaonline.com.cn</a><br>&gt; <br>&gt; ----- Original Message ----- <br>&gt; From: &quot;Jonhy Pear&quot; <br>&gt; To: &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268723&i=1" target="_top" rel="nofollow">users@...</a>&gt; <br>&gt; Sent: Monday, November 09, 2009 9:21 AM <br>&gt; Subject: Re: beaneditform question <br>&gt; <br>&gt; <br>&gt; Sorry, I mean beaneditform, not beaneditform <br>&gt; <br>&gt; <br>&gt; On Mon, Nov 9, 2009 at 1:05 AM, Jonhy Pear &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268723&i=2" target="_top" rel="nofollow">jonhy.pear@...</a>&gt; wrote: <br>&gt; <br>&gt; &gt; <br>&gt; &gt; <br>&gt; &gt; <br>&gt; &gt; <br>&gt; &gt; Hello all, <br>&gt; &gt; <br>&gt; &gt; This is my first message to the list. I'm new to tapestry and I'm <br>&gt; &gt; evaluating it and looking for some guidance. <br>&gt; &gt; Let's say I have a java bean with: <br>&gt; &gt; <br>&gt; &gt; String nick; <br>&gt; &gt; String firstName; <br>&gt; &gt; String lastName; <br>&gt; &gt; String hashPassword; <br>&gt; &gt; <br>&gt; &gt; I want to use beaneditform to create a new user but I want to add new <br>&gt; &gt; fields: <br>&gt; &gt; <br>&gt; &gt; password <br>&gt; &gt; retypePassword <br>&gt; &gt; <br>&gt; &gt; and validade the presence of both and their equality. You know, that <br>&gt; &gt; typical registration process. <br>&gt; &gt; <br>&gt; &gt; When user submit the new data I want to validate the equality of both <br>&gt; &gt; password and confirmPassword and set a hash based on password in the <br>&gt; field <br>&gt; &gt; hashPassword in the bean. <br>&gt; &gt; <br>&gt; &gt; Does anybody have a sample code that I can use to know what is the best <br>&gt; way <br>&gt; &gt; to achieve this with tapestry? <br>&gt; &gt; <br>&gt; &gt; <br>&gt; &gt; thank you <br>&gt; &gt; <br>&gt; &gt; <br>&gt; &gt; <br>&gt; &gt; <br>&gt; <br>&gt; <br>&gt; -- <br>&gt; João Miguel Pereira <br>&gt; <a href="http://jpereira.eu" target="_top" rel="nofollow">http://jpereira.eu</a><br>&gt; LinkedIn: <a href="http://www.linkedin.com/in/joaomiguelpereira" target="_top" rel="nofollow">http://www.linkedin.com/in/joaomiguelpereira</a><br>&gt; <br>&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268723&i=3" target="_top" rel="nofollow">joaomiguel.pereira@...</a> <br>&gt; (351) 96 275 68 58 <br>&gt; </div><br><br><br>-- <br>João Miguel Pereira <br><a href="http://jpereira.eu" target="_top" rel="nofollow">http://jpereira.eu</a><br>LinkedIn: <a href="http://www.linkedin.com/in/joaomiguelpereira" target="_top" rel="nofollow">http://www.linkedin.com/in/joaomiguelpereira</a><br><br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268723&i=4" target="_top" rel="nofollow">joaomiguel.pereira@...</a> <br>(351) 96 275 68 58 <br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26268022 2009-11-09T07:13:16Z 2009-11-09T07:13:16Z Andy Blower <div class='shrinkable-quote'>&gt; Picture an existing application that's been deployed using Tapestry <br>&gt; 5.1.0.5; the prototype.js is exposed to the client as <br>&gt; /assets/scriptaculous/5.1.0.5/prototype.js. <br>&gt; <br>&gt; Now the application is rebuild with tapx-prototype and redeployed. <br>&gt; Without the remapping, the URL would be unchanged and some clients <br>&gt; would continue to use the old prototype.js. <br>&gt; <br>&gt; With the new contribution, the URL will now be <br>&gt; /assets/tapx-prototype/1.6.1/prototype.js which will force the browser <br>&gt; to reload. </div><br>Right, I understand now - thanks. So we don't need this since we've not released yet and it'll only change again if we upgrade T5 versions. <br>&nbsp; <div class='shrinkable-quote'><br>&gt; That being said, I'm finding the current version number system too <br>&gt; complicated. Rather than hide assets behind a mish-mash of application <br>&gt; version numbers, library version numbers and Tapestry's version <br>&gt; number, I'm thinking of simplifying it to be just the application <br>&gt; version number. So all asset URLs would be /asset/XYZ/... &nbsp;where XYZ <br>&gt; was the application version number. That means that on an update to <br>&gt; the application, clients would have to download a fresh copy of <br>&gt; prototype.js, tapestry.js, etc. (the core Tapestry stack) but it would <br>&gt; be harder to screw up some of these other path & version number <br>&gt; details. </div><br>I like it the way it is personally, seems elegant and efficient. <br><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268022&i=0" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268022&i=1" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26267695 2009-11-09T07:01:28Z 2009-11-09T07:01:28Z Rayden30 Hello, <br><br><br>First I m a beginer in Tapestry... Actually I m developping a webview which has to display an ordered array as below: <br><br>Root 1 <br>Root 2 <br>Root 3 <br>&nbsp;|----Child1 <br>&nbsp;|----Child2 <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|---Child 2.1 <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|---Child 2.2 <br>.... <br>... <br><br>My code in local working perfectly... However when I intrated in my tapestry application it idisplays the following exception: <br><br><b><i>Tag &lt;&gt; on line 158 contains more than one 'valuebool' attribute.</i></b><br><br>I checked on webview and there is no tags which are using this variable name. I try to rename in toto. And the results is the same: <br><br>Below you can see the code: <br><br>In bold where Apache detects an exception. <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; function clear(result) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var res= result.replace('&quot;',''); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var res= res.replace('&quot;',''); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var res= res.replace('[',''); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var res= res.replace(']',''); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var res= res.replace('[',''); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var res= res.replace(']',''); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return res; <br><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; function who_is_root(tab_result) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var i=3; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var root=new Array(); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var y=0; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var valuebool; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var z; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; while (i &lt; tab_result.length) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; var id_parent=clear(tab_result[i]); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; valuebool=false; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; z=1; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; while (z &lt; tab_result.length) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(clear(tab_result[z])==id_parent) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <b>// An exception is up</b><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <b>valuebool=true;</b><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <b>&nbsp;//Sometimes the exception is up for z variables</b><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <b>z=z+4;</b><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (!valuebool) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; root[y]=clear(tab_result[i-3]); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; root[y+1]=clear(tab_result[i-2]); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; root[y+2]=clear(tab_result[i-1]); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; root[y+3]=clear(tab_result[i]); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; y=y+4; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; i=i+4; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return(root); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } &nbsp; <br>&nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; function afficher_enfant(id_root,y,result) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (y &lt;result.length) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(id_root==clear(result[y])) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; //Afficher l'enfant ci-dessous <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;tr&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(result[y-3]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(result[y-2]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(result[y-1]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(result[y]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;/tr&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; y=y+4; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; afficher_enfant(id_root,y,result); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br><br><br><br>&nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; function afficher_ma_config(code,result) <br>&nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; result=result.split(&quot;,&quot;); <br>&nbsp; var tab_root=who_is_root(result); <br>&nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; var i=1; <br>&nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;table align='center' class='tablesorter'&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;thead&gt;&lt;tr &gt;&lt;td&gt;Zone List&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;th&gt;Name&lt;/th&gt;&lt;th&gt;ID&lt;/th&gt;&lt;th&gt;Type&lt;/th&gt;&lt;th&gt;Parents&lt;/th&gt;&lt;/tr&gt;&lt;/thead&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;tbody&gt;&quot;); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; while(i&lt;tab_root.length) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;tr&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i-1]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i+1]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;td&gt;&quot; + clear(tab_root[i+2]) + &quot;&lt;/td&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;/tr&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; afficher_enfant(tab_root[i],3,result); <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; i=i+4; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } <br>&nbsp; <br>&nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;/tbody&gt;&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; document.write(&quot;&lt;/table&gt;&quot;); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; } <br><br>&nbsp; &nbsp; &nbsp; &nbsp; var reqparam=&quot;<a href="http://10.192.168.2/zones/list" target="_top" rel="nofollow">http://10.192.168.2/zones/list</a>&quot;; <br><br><br>&nbsp; &nbsp; &nbsp; &nbsp; triggerAction('listrules',[reqparam],afficher_ma_config,'text/html'); <br><br><br>&nbsp;Thank you for answering to this question, <br><br>&nbsp;I think this subject was already underlined in either part of this forum <br><br>&nbsp;Best Regards, <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---Dev-f339.html" embed="fixTarget[339]" target="_top" >Tapestry - Dev</a></p> tag:old.nabble.com,2006:post-26267409 2009-11-09T06:32:20Z 2009-11-09T06:32:20Z Wilson Ikeda I think that Inge Solvoli is right, but rather than writing a book &nbsp; <br>first i think that the Tapestry site need to be redone (what happened &nbsp; <br>to the redesign?), it's the first place that people new to Tapestry &nbsp; <br>will look at and i think that today's design and layout give people &nbsp; <br>the impressions: complex, difficult to understand how to create and &nbsp; <br>use zones for example, needs organization: components -&gt; Tapestry &nbsp; <br>version x, how to for specific versions etc. People convinced that &nbsp; <br>it's a good framework will buy the book but if not they will not spend &nbsp; <br>money and time on a Tapestry 5.1 book. What if rather than writing a &nbsp; <br>book and selling it, write and redesign the site using the material &nbsp; <br>that was to go for the book? It's the Main Store for Tapestry. If the &nbsp; <br>site's documentation is good enough it will be echoed on the net: &nbsp; <br>&quot;Want to learn Tapestry, go to the tapestry site, the documentation is &nbsp; <br>awesome!&quot;. <br><br>Just my thoughts! <br><br>On Nov 9, 2009, at 9:35 PM, Inge Solvoll wrote: <br><div class='shrinkable-quote'><br>&gt; From: Inge Solvoll &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267409&i=0" target="_top" rel="nofollow">inge.tapestry@...</a>&gt; <br>&gt; Date: November 9, 2009 5:34:33 PM GMT+09:00 <br>&gt; To: Tapestry users &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267409&i=1" target="_top" rel="nofollow">users@...</a>&gt; <br>&gt; Subject: Re: [Tapestry Central] Next Steps for Tapestry <br>&gt; <br>&gt; <br>&gt; Book. Web site. Marketing. Strategy. <br>&gt; <br>&gt; Just to make a statement here: THE TAPESTRY 5 CODE IS MORE THAN GOOD <br>&gt; ENOUGH!! The quality of the code and the framework just isn't the <br>&gt; bottleneck. I think we all can agree on that? <br>&gt; <br>&gt; Who cares about Spring Web Flow or portlet support? Do we really &nbsp; <br>&gt; think that <br>&gt; such features would generate exponential amounts of traffic to the T5 <br>&gt; website? Because that's what we need. Exponential growth in the user &nbsp; <br>&gt; base. <br>&gt; My fear is that T5 will simply die within a couple of years if we &nbsp; <br>&gt; don't get <br>&gt; massive growth and popularity. So what can we do to achieve that? &nbsp; <br>&gt; Exposing <br>&gt; internal services as public sounds like a great idea to me, but it &nbsp; <br>&gt; sure <br>&gt; won't help much for the exponential growth. <br>&gt; <br>&gt; I think the best way for Howard to spend his time would be to find &nbsp; <br>&gt; more <br>&gt; people to delegate work to, and spend some quality time with those &nbsp; <br>&gt; people. <br>&gt; And after that, focus on marketing and documentation. <br>&gt; <br>&gt; Hope I didn't offend anyone with this rather brutal post. I want &nbsp; <br>&gt; only the <br>&gt; best for this excellent framework and its very talented founder :) </div><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26267345 2009-11-09T06:28:12Z 2009-11-09T06:28:12Z Thiago H. de Paula Figueiredo Em Mon, 09 Nov 2009 11:24:21 -0200, Angelo Chen &nbsp; <br>&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267345&i=0" target="_top" rel="nofollow">angelochen960@...</a>&gt; escreveu: <br><br>&gt; Hi, <br><br>Hi! <br><br>&gt; 2) if I do a lnk.addParameter(&quot;country&quot;, null) and I got following: <br>&gt; &nbsp;RequestExceptionHandler Unexpected runtime exception: Parameter value &nbsp; <br>&gt; was null or contained only whitespace. <br><br>Please post a JIRA about it. I think that you use of a query parameter &nbsp; <br>without a value is valid, but the framework thinks otherwise now. <br><br>-- <br>Thiago H. de Paula Figueiredo <br>Independent Java, Apache Tapestry 5 and Hibernate consultant, developer, &nbsp; <br>and instructor <br>Owner, software architect and developer, Ars Machina Tecnologia da &nbsp; <br>Informação Ltda. <br><a href="http://www.arsmachina.com.br" target="_top" rel="nofollow">http://www.arsmachina.com.br</a><br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267345&i=1" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267345&i=2" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26267272 2009-11-09T06:24:31Z 2009-11-09T06:24:31Z Kumar_2106 Hi, <br>I need to Update the TextBox on Change of Select Box. So I am trying to use t5components/OnEvent. <br><br>So I am trying to update Maven POM &nbsp;for t5-common dependency for mixins 't5components/OnEvent' on my tml ,but I am getting below error message when I run mvn clean install <br><br>&nbsp;(For OnEvent mixins &nbsp;I succesfully added &nbsp;&gt;&lt;chenillekit-tapestry&gt; to my Repository but it does not work fine..So I am trying t5Component now and se &nbsp;if it works). <br><br>&nbsp;&lt;dependency&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;groupId&gt;org.apache.tapestry&lt;/groupId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;artifactId&gt;t5c-commons&lt;/artifactId&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;version&gt;0.5.15-SNAPSHOT&lt;/version&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;/dependency&gt; <br><br>&nbsp;&lt;repository&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;id&gt;t5components&lt;/id&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;name&gt;T5Components Maven Repository&lt;/name&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;url&gt; <a href="http://213.160.23.119:8080/t5components" target="_top" rel="nofollow">http://213.160.23.119:8080/t5components</a>&lt;/url&gt; <br>&nbsp; &nbsp; &nbsp; &nbsp; &lt;/repository&gt; <br><br><br><br>------------------------------------------- <br>] Scanning for projects... <br>[INFO] ------------------------------------------------------------------------ <br>[INFO] Building Data Spend Manager <br>[INFO] &nbsp; &nbsp;task-segment: [clean, install] <br>[INFO] ------------------------------------------------------------------------ <br>[INFO] [clean:clean] <br>[INFO] snapshot nu.localhost.tapestry:tapestry-spring-security:2.1.0-SNAPSHOT: checking for updates from t5components <br>[WARNING] repository metadata for: 'snapshot nu.localhost.tapestry:tapestry-spring-security:2.1.0-SNAPSHOT' could not be retrieved from repository: t5components due to an error: Error transferring file <br>[INFO] Repository 't5components' will be blacklisted <br>[INFO] ------------------------------------------------------------------------ <br>[ERROR] BUILD ERROR <br>[INFO] ------------------------------------------------------------------------ <br>[INFO] Failed to resolve artifact. <br><br>Missing: <br>---------- <br>1) org.apache.tapestry:t5c-commons:jar:0.5.15-SNAPSHOT <br><br>&nbsp; Try downloading the file manually from the project website. <br><br>&nbsp; Then, install it using the command: <br>&nbsp; &nbsp; &nbsp; mvn install:install-file -DgroupId=org.apache.tapestry -DartifactId=t5c-commons -Dversion=0.5.15-SNAPSHOT -Dpackaging=jar -Dfile=/path/to/file <br><br>&nbsp; Alternatively, if you host your own repository you can deploy the file there: <br>&nbsp; &nbsp; &nbsp; mvn deploy:deploy-file -DgroupId=org.apache.tapestry -DartifactId=t5c-commons -Dversion=0.5.15-SNAPSHOT -Dpackaging=jar -Dfile=/path/to/file -Durl=[url] -DrepositoryId=[id] <br><br>&nbsp; Path to dependency: <br>&nbsp; 1) net.rockshore.dsm:DataSpendManager:war:1.0-SNAPSHOT <br>&nbsp; 2) org.apache.tapestry:t5c-commons:jar:0.5.15-SNAPSHOT <br><br>---------- <br>1 required artifact is missing. <br><br>for artifact: <br>&nbsp; net.rockshore.dsm:DataSpendManager:war:1.0-SNAPSHOT <br><br>from the specified remote repositories: <br>&nbsp; t5components (<a href="http://213.160.23.119:8080/t5components" target="_top" rel="nofollow">http://213.160.23.119:8080/t5components</a>), <br>&nbsp; nexus (<a href="https://rockshore.net/nexus/content/groups/public" target="_top" rel="nofollow">https://rockshore.net/nexus/content/groups/public</a>), <br>&nbsp; chenillekit (<a href="http://www.chenillekit.org/mvnrepo/release" target="_top" rel="nofollow">http://www.chenillekit.org/mvnrepo/release</a>) <br><br><br>[INFO] ------------------------------------------------------------------------ <br>[INFO] For more information, run Maven with the -e switch <br>[INFO] ------------------------------------------------------------------------ <br>[INFO] Total time: 7 seconds <br>[INFO] Finished at: Mon Nov 09 14:14:26 GMT 2009 <br>[INFO] Final Memory: 15M/119M <br><br><br><br>Can You pleas help on this ?? Any piece of advise is highly appreciated. <br><br><br>Thanks, <br>Kumar <br><br><br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color"> <div class="quote-author" style="font-weight: bold;">Sven Homburg wrote:</div> <div class="quote-message">Hi there, <br><br>the t5components release 0.5.4 is out now. <br>special thanks to Tod Orr and Ted Steen to let include <br>their components into T5Components <br><br>project page with demo &nbsp;click here <a href="http://213.160.23.119:8080/t5components/" target="_top" rel="nofollow">http://213.160.23.119:8080/t5components/</a></div> </div></blockquote> <p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26267129 2009-11-09T06:15:43Z 2009-11-09T06:15:43Z Angelo Chen I need that to be in the url so it can be captured by Google Analytics. <br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color"> <div class="quote-author" style="font-weight: bold;">Alexey Hanin wrote:</div> <div class="quote-message shrinkable-quote">Don't have an opportunity to check this but as I know Tapestry treats <br>empty parameters as nulls. Just curious, why do you want empty <br>parameter in query string? Conceptually, parameters not being set <br>makes it null. <br><br>On Mon, Nov 9, 2009 at 3:50 PM, Angelo Chen &lt;angelochen960@yahoo.com.hk&gt; wrote: <br>&gt; <br>&gt; Hi, <br>&gt; Thanks for the reply, but it does not work, still same error, i check the <br>&gt; LinkImpl: <br>&gt; <br>&gt;  public void addParameter(String parameterName, String value) <br>&gt;    { <br>&gt;        Defense.notBlank(parameterName, &quot;parameterName&quot;); <br>&gt;        Defense.notBlank(value, &quot;value&quot;); <br>&gt; <br>&gt;        if (parameters == null) <br>&gt;            parameters = CollectionFactory.newMap(); <br>&gt; <br>&gt;        parameters.put(parameterName, value); <br>&gt;    } <br>&gt; <br>&gt; it is making sure the value is not blank, but I believe query string having <br>&gt; blank value is often. <br>&gt; <br>&gt; <br>&gt; Alexey Hanin wrote: <br>&gt;&gt; <br>&gt;&gt; Just make it empty string when it's null: <br>&gt;&gt; <br>&gt;&gt; lnk.addParameter(&quot;country&quot;, country == null ? &quot;&quot; : country); <br>&gt;&gt; <br>&gt;&gt; On Mon, Nov 9, 2009 at 3:24 PM, Angelo Chen &lt;angelochen960@yahoo.com.hk&gt; <br>&gt;&gt; wrote: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Hi, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; I have a query string that I need to append to a  Link object, the query <br>&gt;&gt;&gt; string is: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; ?gender=M&country= <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; I got two questions: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; 1) is there a simple way to append this string to a Link object instead <br>&gt;&gt;&gt; of <br>&gt;&gt;&gt; using addParameter? <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; 2) if I do a lnk.addParameter(&quot;country&quot;, null) and I got following: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt;  RequestExceptionHandler Unexpected runtime exception: Parameter value <br>&gt;&gt;&gt; was <br>&gt;&gt;&gt; null or contained only whitespace. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; and I need to make the country part of query string even it is null, any <br>&gt;&gt;&gt; idea? thanks, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; A.C. <br>&gt;&gt;&gt; -- <br>&gt;&gt;&gt; View this message in context: <br>&gt;&gt;&gt; <a href="http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266356.html" target="_top" rel="nofollow">http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266356.html</a><br>&gt;&gt;&gt; Sent from the Tapestry - User mailing list archive at Nabble.com. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt;&gt; To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>&gt;&gt;&gt; For additional commands, e-mail: users-help@tapestry.apache.org <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt; To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>&gt;&gt; For additional commands, e-mail: users-help@tapestry.apache.org <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; <br>&gt; <br>&gt; -- <br>&gt; View this message in context: <a href="http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266715.html" target="_top" rel="nofollow">http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266715.html</a><br>&gt; Sent from the Tapestry - User mailing list archive at Nabble.com. <br>&gt; <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>&gt; For additional commands, e-mail: users-help@tapestry.apache.org <br>&gt; <br>&gt; <br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>For additional commands, e-mail: users-help@tapestry.apache.org <br></div> </div></blockquote> <p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26266881 2009-11-09T06:00:50Z 2009-11-09T06:00:50Z Alexey Hanin Don't have an opportunity to check this but as I know Tapestry treats <br>empty parameters as nulls. Just curious, why do you want empty <br>parameter in query string? Conceptually, parameters not being set <br>makes it null. <br><br>On Mon, Nov 9, 2009 at 3:50 PM, Angelo Chen &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=0" target="_top" rel="nofollow">angelochen960@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; <br>&gt; Hi, <br>&gt; Thanks for the reply, but it does not work, still same error, i check the <br>&gt; LinkImpl: <br>&gt; <br>&gt;  public void addParameter(String parameterName, String value) <br>&gt;    { <br>&gt;        Defense.notBlank(parameterName, &quot;parameterName&quot;); <br>&gt;        Defense.notBlank(value, &quot;value&quot;); <br>&gt; <br>&gt;        if (parameters == null) <br>&gt;            parameters = CollectionFactory.newMap(); <br>&gt; <br>&gt;        parameters.put(parameterName, value); <br>&gt;    } <br>&gt; <br>&gt; it is making sure the value is not blank, but I believe query string having <br>&gt; blank value is often. <br>&gt; <br>&gt; <br>&gt; Alexey Hanin wrote: <br>&gt;&gt; <br>&gt;&gt; Just make it empty string when it's null: <br>&gt;&gt; <br>&gt;&gt; lnk.addParameter(&quot;country&quot;, country == null ? &quot;&quot; : country); <br>&gt;&gt; <br>&gt;&gt; On Mon, Nov 9, 2009 at 3:24 PM, Angelo Chen &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=1" target="_top" rel="nofollow">angelochen960@...</a>&gt; <br>&gt;&gt; wrote: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Hi, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; I have a query string that I need to append to a  Link object, the query <br>&gt;&gt;&gt; string is: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; ?gender=M&country= <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; I got two questions: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; 1) is there a simple way to append this string to a Link object instead <br>&gt;&gt;&gt; of <br>&gt;&gt;&gt; using addParameter? <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; 2) if I do a lnk.addParameter(&quot;country&quot;, null) and I got following: <br>&gt;&gt;&gt; <br>&gt;&gt;&gt;  RequestExceptionHandler Unexpected runtime exception: Parameter value <br>&gt;&gt;&gt; was <br>&gt;&gt;&gt; null or contained only whitespace. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; and I need to make the country part of query string even it is null, any <br>&gt;&gt;&gt; idea? thanks, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; A.C. <br>&gt;&gt;&gt; -- <br>&gt;&gt;&gt; View this message in context: <br>&gt;&gt;&gt; <a href="http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266356.html" target="_top" rel="nofollow">http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266356.html</a><br>&gt;&gt;&gt; Sent from the Tapestry - User mailing list archive at Nabble.com. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt;&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=2" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt;&gt;&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=3" target="_top" rel="nofollow">users-help@...</a> <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; --------------------------------------------------------------------- <br>&gt;&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=4" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt;&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=5" target="_top" rel="nofollow">users-help@...</a> <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; <br>&gt; <br>&gt; -- <br>&gt; View this message in context: <a href="http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266715.html" target="_top" rel="nofollow">http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266715.html</a><br>&gt; Sent from the Tapestry - User mailing list archive at Nabble.com. <br>&gt; <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=6" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>&gt; For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=7" target="_top" rel="nofollow">users-help@...</a> <br>&gt; <br>&gt; </div><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=8" target="_top" rel="nofollow">users-unsubscribe@...</a> <br>For additional commands, e-mail: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266881&i=9" target="_top" rel="nofollow">users-help@...</a> <br><br><p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p> tag:old.nabble.com,2006:post-26266715 2009-11-09T05:50:57Z 2009-11-09T05:50:57Z Angelo Chen Hi, <br>Thanks for the reply, but it does not work, still same error, i check the LinkImpl: <br><br>&nbsp; public void addParameter(String parameterName, String value) <br>&nbsp; &nbsp; { <br>&nbsp; &nbsp; &nbsp; &nbsp; Defense.notBlank(parameterName, &quot;parameterName&quot;); <br>&nbsp; &nbsp; &nbsp; &nbsp; Defense.notBlank(value, &quot;value&quot;); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; if (parameters == null) <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; parameters = CollectionFactory.newMap(); <br><br>&nbsp; &nbsp; &nbsp; &nbsp; parameters.put(parameterName, value); <br>&nbsp; &nbsp; } <br><br>it is making sure the value is not blank, but I believe query string having blank value is often. <br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color"> <div class="quote-author" style="font-weight: bold;">Alexey Hanin wrote:</div> <div class="quote-message shrinkable-quote">Just make it empty string when it's null: <br><br>lnk.addParameter(&quot;country&quot;, country == null ? &quot;&quot; : country); <br><br>On Mon, Nov 9, 2009 at 3:24 PM, Angelo Chen &lt;angelochen960@yahoo.com.hk&gt; wrote: <br>&gt; <br>&gt; Hi, <br>&gt; <br>&gt; I have a query string that I need to append to a  Link object, the query <br>&gt; string is: <br>&gt; <br>&gt; ?gender=M&country= <br>&gt; <br>&gt; I got two questions: <br>&gt; <br>&gt; 1) is there a simple way to append this string to a Link object instead of <br>&gt; using addParameter? <br>&gt; <br>&gt; 2) if I do a lnk.addParameter(&quot;country&quot;, null) and I got following: <br>&gt; <br>&gt;  RequestExceptionHandler Unexpected runtime exception: Parameter value was <br>&gt; null or contained only whitespace. <br>&gt; <br>&gt; and I need to make the country part of query string even it is null, any <br>&gt; idea? thanks, <br>&gt; <br>&gt; A.C. <br>&gt; -- <br>&gt; View this message in context: <a href="http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266356.html" target="_top" rel="nofollow">http://old.nabble.com/t5%3A-Link-s-addParameter-and-null-tp26266356p26266356.html</a><br>&gt; Sent from the Tapestry - User mailing list archive at Nabble.com. <br>&gt; <br>&gt; <br>&gt; --------------------------------------------------------------------- <br>&gt; To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>&gt; For additional commands, e-mail: users-help@tapestry.apache.org <br>&gt; <br>&gt; <br><br>--------------------------------------------------------------------- <br>To unsubscribe, e-mail: users-unsubscribe@tapestry.apache.org <br>For additional commands, e-mail: users-help@tapestry.apache.org <br></div> </div></blockquote> <p>From forum: <a href="http://old.nabble.com/Tapestry---User-f340.html" embed="fixTarget[340]" target="_top" >Tapestry - User</a></p>