[WICKET-6245] Open up CsrfPreventionRequestCycleListener for extension

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 6.20.0, 7.0.0, 6.21.0, 7.1.0, 7.2.0, 7.3.0, 8.0.0-M1, 6.22.0, 6.23.0, 7.4.0, 6.24.0
• Fix Version/s: 8.0.0-M2, 6.25.0, 7.5.0
• Component/s: wicket
• Assignee: Martijn Dashorst
• Reporter: Martijn Dashorst
• Created: 19/Sep/16 12:55
• Updated: 18/Nov/16 23:03
• Resolved: 26/Oct/16 12:19

Description

The design of the CsrfPreventionRequestCycleListener is such that it is open for extension, but fails to provide the right hooks for implementors. We should allow private methods to be called from event handlers, and allow overriding of several checkpoints in the API.

Issue Links

• relates to: WICKET-6274 Add origin header to ajax requests in BaseWicketTester
• links to: GitHub Pull Request #187