[
https://issues.apache.org/jira/browse/WICKET-7172?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18076939#comment-18076939
]
ASF subversion and git services commented on WICKET-7172:
---------------------------------------------------------
Commit f25892286e26996e6775406d587db614677307e8 in wicket's branch
refs/heads/reiern70/WICKET-7179 from Kees van Dieren
[ https://gitbox.apache.org/repos/asf?p=wicket.git;h=f25892286e ]
WICKET-7172: Extend CSP with support for script-src-attr, style-src-attr (#1341)
* Add support for script-src-attr, style-src-attr
* Fixed brackets indentation
* Fixed brackets indentation
* refactor for logic condition
* Drop unsupported directive
Not listed here:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy
* WICKET-7172: Improve the unit tests
* Use equals() to compare the values
* Correct implementation for script-src-attributes and style-src-attributes
Support additional values from spec
Removed specific verifications
---------
Co-authored-by: Kees van Dieren <[email protected]>
Co-authored-by: Andrea Del Bene <[email protected]>
Co-authored-by: Martin Tzvetanov Grigorov <[email protected]>
Co-authored-by: Martin Grigorov <[email protected]>
> Support new CSP style, script directives
> ----------------------------------------
>
> Key: WICKET-7172
> URL: https://issues.apache.org/jira/browse/WICKET-7172
> Project: Wicket
> Issue Type: Improvement
> Components: wicket-core
> Reporter: Kees van Dieren
> Assignee: Martin Tzvetanov Grigorov
> Priority: Major
> Fix For: 11.0.0, 10.9.0
>
>
> Support new CSP directives added to the CSP in 2022
> They where not yet supported by Wicket.
> See: https://github.com/apache/wicket/pull/1341
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
