https://bz.apache.org/bugzilla/show_bug.cgi?id=57837
--- Comment #7 from mgrigorov <mgrigo...@apache.org> --- I agree with Rainer that JavaScript should be whitelisted as well. @Mark: do you see problem by adding text/javascript and application/javascript to the list? -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org