You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@myfaces.apache.org by "Udo Schnurpfeil (JIRA)" <de...@myfaces.apache.org> on 2012/07/04 14:30:35 UTC

[jira] [Created] (TOBAGO-1171) Support for the Content Security Policy

Udo Schnurpfeil created TOBAGO-1171:
---------------------------------------

             Summary: Support for the Content Security Policy
                 Key: TOBAGO-1171
                 URL: https://issues.apache.org/jira/browse/TOBAGO-1171
             Project: MyFaces Tobago
          Issue Type: New Feature
          Components: Themes
            Reporter: Udo Schnurpfeil
            Assignee: Udo Schnurpfeil


This security feature is currently under development in the W3.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TOBAGO-1171) Support for the Content Security Policy (CSP)

Posted by "Hudson (JIRA)" <de...@myfaces.apache.org>.
    [ https://issues.apache.org/jira/browse/TOBAGO-1171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13421291#comment-13421291 ] 

Hudson commented on TOBAGO-1171:
--------------------------------

Integrated in tobago-trunk #843 (See [https://builds.apache.org/job/tobago-trunk/843/])
    TOBAGO-1171: Support for the Content Security Policy (CSP) 
 - you can switch CSP on in the tobago-config.xml (please do that only for development in the moment)
 - support for different UserAgent (different header names)
 still open:
 - The renderers of Tobago must be refactored (Revision 1364930)

     Result = SUCCESS
lofwyr : http://svn.apache.org/viewvc/?view=rev&rev=1364930
Files : 
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/config/TobagoConfig.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/context/UserAgent.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/config/TobagoConfigBuilder.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/config/TobagoConfigFragment.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/config/TobagoConfigImpl.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/config/TobagoConfigParser.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/util/ResponseUtils.java
* /myfaces/tobago/trunk/tobago-core/src/main/resources/org/apache/myfaces/tobago/config/tobago-config-1.6.xsd
* /myfaces/tobago/trunk/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml
* /myfaces/tobago/trunk/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/PageRenderer.java

                
> Support for the Content Security Policy (CSP)
> ---------------------------------------------
>
>                 Key: TOBAGO-1171
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1171
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Themes
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>
> This security feature is currently under development in the W3.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TOBAGO-1171) Support for the Content Security Policy (CSP)

Posted by "Hudson (JIRA)" <de...@myfaces.apache.org>.
    [ https://issues.apache.org/jira/browse/TOBAGO-1171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13421381#comment-13421381 ] 

Hudson commented on TOBAGO-1171:
--------------------------------

Integrated in tobago-trunk #845 (See [https://builds.apache.org/job/tobago-trunk/845/])
    TOBAGO-1171: Support for the Content Security Policy (CSP)
 NPE (Revision 1365022)

     Result = FAILURE
lofwyr : http://svn.apache.org/viewvc/?view=rev&rev=1365022
Files : 
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/context/UserAgent.java

                
> Support for the Content Security Policy (CSP)
> ---------------------------------------------
>
>                 Key: TOBAGO-1171
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1171
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Themes
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>
> This security feature is currently under development in the W3.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TOBAGO-1171) Support for the Content Security Policy (CSP)

Posted by "Udo Schnurpfeil (JIRA)" <de...@myfaces.apache.org>.
    [ https://issues.apache.org/jira/browse/TOBAGO-1171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13421256#comment-13421256 ] 

Udo Schnurpfeil commented on TOBAGO-1171:
-----------------------------------------

 - you can switch CSP on in the tobago-config.xml (please do that only for development in the moment)
 - support for different UserAgent (different header names)
 still open:
 - The renderers of Tobago must be refactored
                
> Support for the Content Security Policy (CSP)
> ---------------------------------------------
>
>                 Key: TOBAGO-1171
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1171
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Themes
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>
> This security feature is currently under development in the W3.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TOBAGO-1171) Support for the Content Security Policy (CSP)

Posted by "Hudson (JIRA)" <de...@myfaces.apache.org>.
    [ https://issues.apache.org/jira/browse/TOBAGO-1171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13422246#comment-13422246 ] 

Hudson commented on TOBAGO-1171:
--------------------------------

Integrated in tobago-trunk #852 (See [https://builds.apache.org/job/tobago-trunk/852/])
    TOBAGO-1171: Support for the Content Security Policy (CSP)
 Element style attributes are no longer working with CSP (Revision 1365563)

     Result = SUCCESS
lofwyr : http://svn.apache.org/viewvc/?view=rev&rev=1365563
Files : 
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/context/UserAgent.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/renderkit/css/Style.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/renderkit/html/DataAttributes.java
* /myfaces/tobago/trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/webapp/TobagoResponseWriter.java
* /myfaces/tobago/trunk/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml
* /myfaces/tobago/trunk/tobago-theme/tobago-theme-standard/src/main/resources/org/apache/myfaces/tobago/renderkit/html/standard/standard/script/tobago.js

                
> Support for the Content Security Policy (CSP)
> ---------------------------------------------
>
>                 Key: TOBAGO-1171
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1171
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Themes
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>
> This security feature is currently under development in the W3.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira