Udo Schnurpfeil created TOBAGO-1790:
---------------------------------------

             Summary: CSP definition must be appendable
                 Key: TOBAGO-1790
                 URL: https://issues.apache.org/jira/browse/TOBAGO-1790
             Project: MyFaces Tobago
          Issue Type: New Feature
            Reporter: Udo Schnurpfeil
            Assignee: Udo Schnurpfeil


Currently there is no possibility to define CSP headers twice. It's not 
supported by the specification. If a key is set twice, the first counts, the 
second will be ignored.

So, the values have to be merged.
To be more convenient, the "directive" tags gets a new attribute "name":
{code}
<directive name="script-src">'self'</directive>
{code}




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to