[TAP5-1696] Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.3
• Fix Version/s: 5.3
• Component/s: tapestry-core
• Labels: security
• Assignee: Howard Lewis Ship
• Reporter: Howard Lewis Ship
• Created: 13/Oct/11 20:59
• Updated: 27/Oct/11 00:18
• Resolved: 27/Oct/11 00:18

Description

PageCatalog and ServiceStatus should be protected with this page. A service should be used to determine if the page should be accessible. The default rule should be "localhost only".