pon., 17 cze 2024 o 07:27 Nikhil P Kookkiri <nikhil.kookk...@sicurosolutions.com> napisał(a): > > Hello there, > > The default CSP implementation is allowing inline styles in the JSPs. I am > looking for documentation that will help me use custom CSP settings.
Since Struts 6.2.0 you can use CspSettingsAware interface to configure this by action [1], in Struts 6.5.0 a global (per interceptor stack) cspSettingsClassName [1] will be available. [1] https://struts.apache.org/core-developers/csp-interceptor#action-aware [2] https://struts.apache.org/core-developers/csp-interceptor#parameters Cheers Lukasz --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@struts.apache.org
