You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by pa...@apache.org on 2020/02/07 15:07:02 UTC
[wicket] 01/02: WICKET-6727: do not yet enable CSP by default,
see WICKET-6733
This is an automated email from the ASF dual-hosted git repository.
papegaaij pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/wicket.git
commit 8f7ee84dd86312a4709cc0de89d0d67c543c4d28
Author: Emond Papegaaij <em...@topicus.nl>
AuthorDate: Fri Feb 7 16:03:46 2020 +0100
WICKET-6727: do not yet enable CSP by default, see WICKET-6733
---
.../src/main/java/org/apache/wicket/protocol/http/WebApplication.java | 2 --
1 file changed, 2 deletions(-)
diff --git a/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java b/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java
index 0c6dc68..bc51cdc 100644
--- a/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java
+++ b/wicket-core/src/main/java/org/apache/wicket/protocol/http/WebApplication.java
@@ -755,7 +755,6 @@ public abstract class WebApplication extends Application
getHeaderResponseDecorators()
.add(response -> new CSPNonceHeaderResponseDecorator(response, getCsp()));
mount(new ReportCSPViolationMapper(getCsp()));
- getCsp().blocking().unsafeInline();
if (getConfigurationType() == RuntimeConfigurationType.DEVELOPMENT)
{
@@ -765,7 +764,6 @@ public abstract class WebApplication extends Application
{
getResourceSettings().getResourceFinders().add(new Path(resourceFolder));
}
- getCsp().blocking().reportBack();
}
setPageRendererProvider(WebPageRenderer::new);
setSessionStoreProvider(HttpSessionStore::new);