Konstantin,

On Sun, Aug 16, 2020 at 1:00 PM Konstantin Kolinko <knst.koli...@gmail.com>
wrote:

> вс, 16 авг. 2020 г. в 21:32, Igal Sapir <i...@lucee.org>:
> >
> > I don't see any scripts either.  Why not add a CSP and set script to
> 'none'?  I can add that if no one objects.
> >
>
> sessionsList.jsp has onclick attributes. Maybe it can be modified to
> work without them, I do not know.
>

Definitely something to consider.  I naively searched for "script" and
missed that.

Thank you,

Igal



>
> K.Kolinko
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>
>

Reply via email to