[ https://issues.apache.org/jira/browse/WICKET-7107?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dirk Forchel updated WICKET-7107: --------------------------------- Description: If we redirect to another Web Page and use the RedirectPolicy.AUTO_REDIRECT, this results in the CSP directives being missing in the head of the result page. I've attached a quickstart application to show the error. Just browse to [http://localhost:8080/redirect|http://localhost:8080/redirect.] and use the browser's developer console of your choice. The CSP is not included if Wicket performs a RestartResponseException with a WebPage instance like this {code:java} throw new RestartResponseException(new HomePage(new PageParameters()));{code} If you open the home page directly [http://localhost:8080/|http://localhost:8080/redirect.] the response does include a CSP. There is an additional test for the CSPRequestCycleListener with different page classes as test parameters. Relates to https://issues.apache.org/jira/browse/WICKET-7028 was: If we redirect to another Web Page and use the RedirectPolicy.AUTO_REDIRECT, this results in the CSP directives being missing in the head of the result page. I've attached a Quickstart with the use-case (see RedirectPage.java) and an additional Test for the CSPRequestCycleListener with different page classes as test parameters. Relates to https://issues.apache.org/jira/browse/WICKET-7028 > CSP Header not rendered when using RedirectPolicy.AUTO_REDIRECT > --------------------------------------------------------------- > > Key: WICKET-7107 > URL: https://issues.apache.org/jira/browse/WICKET-7107 > Project: Wicket > Issue Type: Bug > Components: wicket-core > Affects Versions: 9.16.0 > Reporter: Dirk Forchel > Priority: Major > Attachments: myproject.zip > > > If we redirect to another Web Page and use the RedirectPolicy.AUTO_REDIRECT, > this results in the CSP directives being missing in the head of the result > page. > I've attached a quickstart application to show the error. Just browse to > [http://localhost:8080/redirect|http://localhost:8080/redirect.] and use the > browser's developer console of your choice. The CSP is not included if Wicket > performs a RestartResponseException with a WebPage instance like this > {code:java} > throw new RestartResponseException(new HomePage(new PageParameters()));{code} > If you open the home page directly > [http://localhost:8080/|http://localhost:8080/redirect.] the response does > include a CSP. > There is an additional test for the CSPRequestCycleListener with different > page classes as test parameters. > Relates to https://issues.apache.org/jira/browse/WICKET-7028 -- This message was sent by Atlassian Jira (v8.20.10#820010)