Creating a new default secure stack sounds good to me. Thank for considering.

As far as I can see there would be 4 additional interceptors in this secure stack:

CoepInterceptor.java
CoopInterceptor.java
CspInterceptor.java
FetchMetadataInterceptor.java

And the appropriate resources used by them:
ResourceIsolationPolicy.java
StrutsResourceIsolationPolicy.java

Best regards
Markus


Am 31.08.22 um 14:11 schrieb Lukasz Lenart:
I think disabling them doesn't make sense - these are just
interceptors so you can create your own stack without them. I would
rather create a new default secure stack and move those interceptors
into that stack, wdyt?


Regards

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org

Reply via email to