[
https://issues.apache.org/jira/browse/WICKET-7172?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18075138#comment-18075138
]
ASF subversion and git services commented on WICKET-7172:
---------------------------------------------------------
Commit 87ea409e5411b4d6af71f428f5c0b2ae72085290 in wicket's branch
refs/heads/wicket-10.x from Kees van Dieren
[ https://gitbox.apache.org/repos/asf?p=wicket.git;h=87ea409e54 ]
WICKET-7172: Extend CSP with support for script-src-attr, style-src-attr (#1341)
* Add support for script-src-attr, style-src-attr
* Fixed brackets indentation
* Fixed brackets indentation
* refactor for logic condition
* Drop unsupported directive
Not listed here:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy
* WICKET-7172: Improve the unit tests
* Use equals() to compare the values
* Correct implementation for script-src-attributes and style-src-attributes
Support additional values from spec
Removed specific verifications
---------
Co-authored-by: Kees van Dieren <[email protected]>
Co-authored-by: Andrea Del Bene <[email protected]>
Co-authored-by: Martin Tzvetanov Grigorov <[email protected]>
Co-authored-by: Martin Grigorov <[email protected]>
(cherry picked from commit f25892286e26996e6775406d587db614677307e8)
> Support new CSP style, script directives
> ----------------------------------------
>
> Key: WICKET-7172
> URL: https://issues.apache.org/jira/browse/WICKET-7172
> Project: Wicket
> Issue Type: Improvement
> Components: wicket-core
> Reporter: Kees van Dieren
> Priority: Major
>
> Support new CSP directives added to the CSP in 2022
> They where not yet supported by Wicket.
> See: https://github.com/apache/wicket/pull/1341
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
