Santiago Diaz created WICKET-6805:
-------------------------------------

             Summary: Add Cross-Origin Opener Policy Support
                 Key: WICKET-6805
                 URL: https://issues.apache.org/jira/browse/WICKET-6805
             Project: Wicket
          Issue Type: New Feature
          Components: wicket-core
            Reporter: Santiago Diaz


We would like to add support in Wicket for Cross-Origin Opener Policy.

COOP is a security mitigation that lets developers isolate their resources 
against side-channel attacks and information leaks. COOP is now supported by 
all major browsers.

A COOP request cycle listener will be implemented to add COOP headers to HTTP 
responses, allowing developers to configure COOP to use {{unsafe-none}}, 
{{same-site}} or {{same-origin}}. Finally, developers will be able to disable 
COOP entirely for a set of exempted paths that are intended to be used 
cross-site.

 

References:

[https://web.dev/why-coop-coep/]

[https://web.dev/coop-coep/]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to