This is an automated email from the ASF dual-hosted git repository. papegaaij pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/wicket.git
commit 8f7ee84dd86312a4709cc0de89d0d67c543c4d28 Author: Emond Papegaaij <[email protected]> AuthorDate: Fri Feb 7 16:03:46 2020 +0100 WICKET-6727: do not yet enable CSP by default, see WICKET-6733 --- .../src/main/java/org/apache/wicket/protocol/http/WebApplication.java | 2 -- 1 file changed, 2 deletions(-) diff --git a/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java b/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java index 0c6dc68..bc51cdc 100644 --- a/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java +++ b/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java @@ -755,7 +755,6 @@ public abstract class WebApplication extends Application getHeaderResponseDecorators() .add(response -> new CSPNonceHeaderResponseDecorator(response, getCsp())); mount(new ReportCSPViolationMapper(getCsp())); - getCsp().blocking().unsafeInline(); if (getConfigurationType() == RuntimeConfigurationType.DEVELOPMENT) { @@ -765,7 +764,6 @@ public abstract class WebApplication extends Application { getResourceSettings().getResourceFinders().add(new Path(resourceFolder)); } - getCsp().blocking().reportBack(); } setPageRendererProvider(WebPageRenderer::new); setSessionStoreProvider(HttpSessionStore::new);
