You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@myfaces.apache.org by "Udo Schnurpfeil (JIRA)" <de...@myfaces.apache.org> on 2014/01/03 18:42:02 UTC

[jira] [Resolved] (TOBAGO-1171) Support for the Content Security Policy (CSP)

     [ https://issues.apache.org/jira/browse/TOBAGO-1171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Udo Schnurpfeil resolved TOBAGO-1171.
-------------------------------------

    Resolution: Fixed

> Support for the Content Security Policy (CSP)
> ---------------------------------------------
>
>                 Key: TOBAGO-1171
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1171
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Themes
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>             Fix For: 2.0.0-alpha-3, 2.0.0
>
>
> This is to prevent cross-site scripting (XSS) and related attacks.
> More about this security feature you can found at W3 http://www.w3.org/TR/CSP/
> Main work is to remove all JavaScript from the HTML code, see also the sub-tasks.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)