All pull requests

Pull requests

• [10.x] Let autocomplete selections and ChoiceFilter auto-submit work under the default CSP (WICKET-6938)

  #1728·aeonframework opened Oct 29, 2026·

  ·

• Run the wicket-core-tests classes Surefire skipped

  #1727·sharanggupta opened Oct 28, 2026·

  ·

• Return the text before the last occurrence from StringValue.beforeLast

  #1725·Nexory opened Oct 27, 2026Contributor·

  ·
  1

• Fix AJAX infinite hang for non-standard link rel attributes (Issue #1487)

  #1713·prototype7421-gif opened Oct 24, 2026Contributor·4 tasks done·

  ·
  1

• Remove the frame-src copy of child-src when child-src is removed

  #1698·Nexory opened Oct 22, 2026Contributor·

  ·
  2

• Handle suffix, invalid and unsatisfiable byte ranges (10.x)

  #1697·reiern70 opened Oct 20, 2026Contributor·

  ·

• Follow a flow exception thrown while the request is mapped

  #1696·reiern70 opened Oct 20, 2026Contributor·

  ·
  3

• Handle suffix, invalid and unsatisfiable byte ranges

  #1695·reiern70 opened Oct 20, 2026Contributor·

  ·
  1

  1

• Fix COOP and COEP exemptions

  #1694·asvanberg opened Oct 20, 2026Contributor·

  ·
  1

  1

• Quickstart: slf4j-simple at test scope, with jetty:run still logging (10.x)

  #1692·dashorst opened Oct 20, 2026Contributor·

  ·

• Let jetty:run in the quickstart see the test-scoped SLF4J back end

  #1691·dashorst opened Oct 20, 2026Contributor·

  ·
  1

• WICKET-7201: Back-port XsltTransformer secure-processing hardening (8.x)

  #1687·archiforge opened Oct 19, 2026·

  ·
  1

• WICKET-7201: Back-port XsltTransformer secure-processing hardening (9.x)

  #1686·archiforge opened Oct 19, 2026·

  ·
  1

• WICKET-7201: Back-port XsltTransformer secure-processing hardening (10.x)

  #1685·archiforge opened Oct 19, 2026·

  ·
  1

• Fall back to the default charset when the multipart charset is not supported

  #1677·17krishna8 opened Oct 17, 2026Contributor·

  ·
  1

• Name the parameter when a websocket pageId is not a number

  #1674·17krishna8 opened Oct 16, 2026Contributor·

  ·
  6

• Answer a 400 when the ajax base url port is not a number

  #1673·17krishna8 opened Oct 16, 2026Contributor·

  ·
  5

• Ignore a Range header whose value is not well-formed

  #1672·17krishna8 opened Oct 16, 2026Contributor·

  ·
  3

• escape backslashes in single-quoted Ajax script strings

  #1668·fr-manvi opened Oct 15, 2026Contributor·

  ·
  5

• Let autocomplete selections and ChoiceFilter auto-submit work under the default CSP (WICKET-6938)

  #1667·aeonframework opened Oct 14, 2026·

  ·
  3

• Fixes Issue #1662: created JmxReporter is stored as private field

  #1666·solomax opened Oct 13, 2026Contributor·

  ·
  1

  

• Fixes issue #1524: isolate partial update script evaluation

  #1598·arimu1 opened Sep 12, 2026·2 tasks done·

  ·
  1

• Let applications restrict which classes wicket-cdi injects

  #1569·pedrosans opened Sep 3, 2026Contributor·

  ·
  1

• Bump org.openrewrite.recipe:rewrite-recipe-bom from 3.26.1 to 3.38.0

  dependenciesjava
  #1557·dependabot[bot] opened Aug 30, 2026Bot·

  ·
  7

• Add opt-in CSP embedding and plugin restrictions

  #1440·jmestwa-coder opened Apr 30, 2026Contributor·

  ·
  1