Re: [Geoserver-devel] CSP with a proxy, how to deal with it

2025-02-03 Thread Humphries, Graham via Geoserver-devel
history and culture of this island, I acknowledge and pay my respects to all Tasmanian Aboriginal people; the past, and present custodians of the Land. From: Andrea Aime Sent: Tuesday, 4 February 2025 1:03 AM To: GeoServer Subject: [Geoserver-devel] CSP with a proxy, how to deal with it Hi all

[Geoserver-devel] CSP with a proxy, how to deal with it

2025-02-03 Thread Andrea Aime
Hi all, I've spent some time trying to figure out how to attack the issue of CSP + Proxy with SSL termination, this mail contains my findings (warning, long and technical). First of all, what's going on? GeoServer code, Spring security, and Wicket internals, all tend to use HTTPServletReponse.redi