Blocker Description
As pointed out on the dev list, the current basic strings "dojo/" and "tapestry/" aren't enough to prevent access to other resources. (such as a class in a package like foo.tapestry.pages )
Investigate using the beginning of line specifier "^" or whatever else works. This definitely needs to be fixed before 4.1.1 goes out.