Re: Any CSP migration tips??

2021-02-16 Thread Martin Grigorov
Hi, In your case I'd disable CSP and migrate the app to 9.2.0. Once all runs as before I will start experimenting enabling CSP little by little, e.g. allow inline scripts and styles for resources served by your application, i.e. same domain. Any third party scripts/styles should be CSP

Any CSP migration tips??

2021-02-16 Thread Wayne W
HI, We are now looking at migrating to Wicket9 and implementing CSP. However we have 10,000s of pages on a 13 year old wicket project and the task almost looks impossible. For example most of our components/panel/pages use inline style some a fair amount of JS as this was chosen at the start as