[ 
https://issues.apache.org/jira/browse/TOBAGO-1534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15424250#comment-15424250
 ] 

Hudson commented on TOBAGO-1534:
--------------------------------

SUCCESS: Integrated in Jenkins build Tobago 3.0.x #460 (See 
[https://builds.apache.org/job/Tobago%203.0.x/460/])
TOBAGO-1534: Some dependencies currently breaking CSP (Content Security Policy) 
in Tobago 3
* using own tobago-jsf.js instead of jsf.js from JSF
 ( this also fixes a problem with <tc:suggest> and <tc:file> on the same page 
with MyFaces 2.0. It's a problem with MultiPart detection in JS ) (lofwyr: 
[http://svn.apache.org/viewvc/?view=rev&rev=1756596])
* (edit) tobago-3.0.x/tobago-theme/tobago-theme-standard/pom.xml
* (edit) 
tobago-3.0.x/tobago-theme/tobago-theme-standard/src/main/java/org/apache/myfaces/tobago/renderkit/html/standard/standard/tag/PageRenderer.java
* (edit) 
tobago-3.0.x/tobago-theme/tobago-theme-standard/src/main/resources/META-INF/tobago-config.xml
* (add) 
tobago-3.0.x/tobago-theme/tobago-theme-standard/src/main/resources/org/apache/myfaces/tobago/renderkit/html/standard/standard/script/tobago-jsf.js


> Some dependencies currently breaking CSP (Content Security Policy) in Tobago 3
> ------------------------------------------------------------------------------
>
>                 Key: TOBAGO-1534
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1534
>             Project: MyFaces Tobago
>          Issue Type: Bug
>          Components: Core, Themes
>            Reporter: Udo Schnurpfeil
>
> Known Problems with CSP:
> * Bootstrap 4: https://github.com/twbs/bootstrap/issues/17964
> * MyFaces jsf.js calls "eval"
> ** copy jsf.js to tobago-jsf.js to
> *** work on removing "eval"
> *** be independent of different implementations (there are problems with 
> MyFaces 2.0, which are fixed with the 2.2 jsf.js version)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to