Re: Inline handlers and content security policy in struts2 6.3

2024-03-13 Thread Dave Newton
On Wed, Mar 13, 2024 at 10:43 AM Aleksandr Kubar wrote: > I would like to ask whether there is any inbuilt solution from struts2 to > handle inline handlers or maybe something planned to do in next releases? > You mean like something that gathers up all the inline handlers and shovels them into

Inline handlers and content security policy in struts2 6.3

2024-03-13 Thread Aleksandr Kubar
Hello, I migrate struts2 from version 2.5 to 6.3 and now I have observed lots of Security Content Policy warnings. I found information about new struts "script" and "link" tags and I introduced them in my app, but I still have many warning regarding inline handlers like: onlick, onchange etc. I di