You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@myfaces.apache.org by "Udo Schnurpfeil (JIRA)" <de...@myfaces.apache.org> on 2017/09/27 09:37:00 UTC

[jira] [Resolved] (TOBAGO-1791) There should be a "nonce" for each request to protect CSS with CSP

     [ https://issues.apache.org/jira/browse/TOBAGO-1791?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Udo Schnurpfeil resolved TOBAGO-1791.
-------------------------------------
    Resolution: Fixed

> There should be a "nonce" for each request to protect CSS with CSP
> ------------------------------------------------------------------
>
>                 Key: TOBAGO-1791
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1791
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Core
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>            Priority: Minor
>             Fix For: 4.0.0
>
>
> The "nonce" allowes inline styling, so we don't need the data-tobago-style attribute.
> The "nonce" should also be usable inside the tobago-config.xml -> directive



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)