andruhon opened a new pull request #382: WICKET-6688 add RFC and replace eval with DOM eval URL: https://github.com/apache/wicket/pull/382 Addressing https://issues.apache.org/jira/browse/WICKET-6688. Didn't update any tests yet. Differences from #378 : * replaced `eval`s in wicket-ajax-jquery with jQuery.globalEval (DOM eval) with optional nonce * introduced a new `meta` response item which currently only has nonse, which is used make all the old code with `appendJavaScript` work. That's it old code can work with strict CSP, without a need to rewrite. The RFC is still here, because it's a way faster, than eval or DOM eval. see https://github.com/apache/wicket/pull/378#issuecomment-525530622
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services
