martin-g commented on pull request #442: URL: https://github.com/apache/wicket/pull/442#issuecomment-679958123
> * Listeners get added to the stack regardless of user config, adding latency to the processing of each request even if they don't act on the request in any way (in CSP for instance, the `mustProtect` method is called on every request even if `ContentSecurityPolicySettings` is empty) This is a good point! I don't remember it being discussed. And I think it was not considered. IMO the CSP listener should be reworked to behave like the new Coop/Coep ones. If an application needs to reconfigure something after the application init phase it can always go through the long path: - iterate over the request cycle listeners - remove any of them - change configuration - (re)add any of them ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org
