[WICKET-3650] parentFolderPlaceholder default value in Settings implementation is inconsistent with the javadoc

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.4.17, 1.5-RC3
• Fix Version/s: 1.4.18, 1.5-RC4
• Component/s: wicket
• Labels: path resource security
• Assignee: Peter Ertl
• Reporter: Frédéric Donckels
• Created: 28/Apr/11 08:11
• Updated: 28/Apr/11 17:54
• Resolved: 28/Apr/11 17:54

Description

In relation to wicket-1992,
the javadoc for:
org.apache.wicket.settings.IResourceSettings#setParentFolderPlaceholder
says:
"Note that by default the placeholder string is empty '' and thus will not allow to access parent folders."

But the default is null, not ''
and this generates src url like this: resources/com.test.sub.pack.TestPage/null/null/base/information.png
which do work, but probably shouldn't.