You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Martin Tzvetanov Grigorov (Jira)" <ji...@apache.org> on 2024/01/08 06:58:00 UTC

[jira] [Created] (WICKET-7093) Add support for missing CSP directives

Martin Tzvetanov Grigorov created WICKET-7093:
-------------------------------------------------

             Summary: Add support for missing CSP directives
                 Key: WICKET-7093
                 URL: https://issues.apache.org/jira/browse/WICKET-7093
             Project: Wicket
          Issue Type: Improvement
          Components: wicket
    Affects Versions: 9.16.0
            Reporter: Martin Tzvetanov Grigorov


A user at StackOverflow reported that the CSP directive `form-action` is not supported: https://stackoverflow.com/questions/77768942/missing-form-action-csp-directive-in-cspdirective

Looking at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/form-action and https://github.com/apache/wicket/blob/c4a77c4ee7b7ec1dd5d071ed6e1e41a9946d6758/wicket-core/src/main/java/org/apache/wicket/csp/CSPDirective.java#L36-L48 I think there are few more that are listed in the CSPDirective enum.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)