Lukasz Lenart created WW-5736:
---------------------------------
Summary: Remove the deprecated struts.csp.nonceSource alias
Key: WW-5736
URL: https://issues.apache.org/jira/browse/WW-5736
Project: Struts 2
Issue Type: Task
Components: Core Interceptors
Reporter: Lukasz Lenart
Fix For: 8.0.0
WW-5669 (7.4.0) started honouring {{struts.csp.nonceSource}} as a deprecated
alias of {{struts.csp.nonce.source}}, because {{default.properties}} had
shipped the camel-case name since 6.8.0 while nothing read it. The alias exists
only so that configurations carrying the dead name take effect on upgrade; it
has no reason to outlive the 7.x line.
Remove in 8.0.0:
* {{StrutsConstants.STRUTS_CSP_NONCE_SOURCE_LEGACY}}
* {{DefaultCspSettings.setLegacyNonceSource(String)}}
* the two-argument constructor of {{StrutsCspNonceReader}}; move the
{{@Inject}} back onto the one-argument constructor
* the {{legacy}} parameter of {{CspNonceSource.resolve}} and its one-time WARN
* {{struts-csp-nonce-source-legacy.xml}} and
{{testLegacyKeyStoresNonceInRequest}} in {{CspNonceSourceConfigTest}}
Add a Migration Guide line: {{struts.csp.nonceSource}} is no longer read; use
{{struts.csp.nonce.source}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
