You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@myfaces.apache.org by lo...@apache.org on 2020/04/15 17:38:08 UTC

[myfaces-tobago] branch tobago-4.x updated: remove old comments

This is an automated email from the ASF dual-hosted git repository.

lofwyr pushed a commit to branch tobago-4.x
in repository https://gitbox.apache.org/repos/asf/myfaces-tobago.git


The following commit(s) were added to refs/heads/tobago-4.x by this push:
     new ef00125  remove old comments
ef00125 is described below

commit ef00125d564a83e170fee646710f5643ce2d539b
Author: Udo Schnurpfeil <ud...@irian.eu>
AuthorDate: Wed Apr 15 19:37:57 2020 +0200

    remove old comments
---
 .../tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml    | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml b/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml
index 481a5dc..b2a766c 100644
--- a/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml
+++ b/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml
@@ -43,12 +43,7 @@
   <!-- This is needed for the testing functionality of the demo, it works with iframes -->
   <prevent-frame-attacks>false</prevent-frame-attacks>
 
-  <!-- XXX for the jQuery tests we need 'report-only' here -->
   <content-security-policy mode="on">
-    <!-- XXX With CSP Tobago 3.0.x is currently not working 100% see TOBAGO-1534,
-         XXX because of JSF-AJAX we need 'unsafe-eval' -->
-    <!--<directive name="script-src">'unsafe-eval'</directive>-->
-
     <!-- script-src: 'unsafe-inline' is required for WebSockets -->
 <!--    <directive name="script-src">'unsafe-inline'</directive>-->
     <!-- needed for <tc:object>  -->