Sorry to disturb you.
I read the Contributing.md
<https://github.com/apache/tomcat/blob/trunk/CONTRIBUTING.md> on your
github mirror and even found the beginner issues
Except there are only three of them, out of which one is already solved,
one is a case of XML validation (not a bug, technically) and one can be
solved using a filter.
So I decided I could go with the filter one but man, CSP is complex and I
don't think one could just do a general 'default-src' because even that can
be pretty tight.
So it is a bit unclear.
Thanks for reading.
I'd appreciate any help in getting started.