[GitHub] [wicket] martin-g commented on issue #399: WICKET-6727: Configurable Content-Security-Policy

2020-01-23 Thread GitBox
martin-g commented on issue #399: WICKET-6727: Configurable Content-Security-Policy URL: https://github.com/apache/wicket/pull/399#issuecomment-577583362 There might be a bug somewhere :-/ This is an automated message from

[GitHub] [wicket] martin-g commented on issue #399: WICKET-6727: Configurable Content-Security-Policy

2020-01-22 Thread GitBox
martin-g commented on issue #399: WICKET-6727: Configurable Content-Security-Policy URL: https://github.com/apache/wicket/pull/399#issuecomment-577528230 > special CSS `custom.css` is editable by our users and placed last (after ``) > Are there any options to `auto` add this to CSP?

[GitHub] [wicket] martin-g commented on issue #399: WICKET-6727: Configurable Content-Security-Policy

2020-01-22 Thread GitBox
martin-g commented on issue #399: WICKET-6727: Configurable Content-Security-Policy URL: https://github.com/apache/wicket/pull/399#issuecomment-577206590 @solomax Is it better with `-Djava.security.egd=file:/dev/./urandom` ?