[
https://issues.apache.org/jira/browse/TOBAGO-1171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13754729#comment-13754729
]
Hudson commented on TOBAGO-1171:
--------------------------------
SUCCESS: Integrated in tobago-trunk #1092 (See
[https://builds.apache.org/job/tobago-trunk/1092/])
TOBAGO-1171: Support for the Content Security Policy (CSP)
- add a note at application startup (lofwyr:
http://svn.apache.org/viewvc/?view=rev&rev=1518968)
* /myfaces/tobago/trunk/src/site/apt/migration-2.0.apt
*
/myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/webapp/TobagoServletContextListener.java
> Support for the Content Security Policy (CSP)
> ---------------------------------------------
>
> Key: TOBAGO-1171
> URL: https://issues.apache.org/jira/browse/TOBAGO-1171
> Project: MyFaces Tobago
> Issue Type: New Feature
> Components: Themes
> Reporter: Udo Schnurpfeil
> Assignee: Udo Schnurpfeil
>
> This is to prevent cross-site scripting (XSS) and related attacks.
> More about this security feature you can found at W3 http://www.w3.org/TR/CSP/
> Main work is to remove all JavaScript from the HTML code, see also the
> sub-tasks.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
