myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <...@myfaces.apache.org>
Subject [jira] [Commented] (TOBAGO-1534) Some dependencies currently breaking CSP (Content Security Policy) in Tobago 3
Date Wed, 17 Aug 2016 10:16:21 GMT

    [ https://issues.apache.org/jira/browse/TOBAGO-1534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15424250#comment-15424250
] 

Hudson commented on TOBAGO-1534:
--------------------------------

SUCCESS: Integrated in Jenkins build Tobago 3.0.x #460 (See [https://builds.apache.org/job/Tobago%203.0.x/460/])
TOBAGO-1534: Some dependencies currently breaking CSP (Content Security Policy) in Tobago
3
* using own tobago-jsf.js instead of jsf.js from JSF
 ( this also fixes a problem with <tc:suggest> and <tc:file> on the same page
with MyFaces 2.0. It's a problem with MultiPart detection in JS ) (lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1756596])
* (edit) tobago-3.0.x/tobago-theme/tobago-theme-standard/pom.xml
* (edit) tobago-3.0.x/tobago-theme/tobago-theme-standard/src/main/java/org/apache/myfaces/tobago/renderkit/html/standard/standard/tag/PageRenderer.java
* (edit) tobago-3.0.x/tobago-theme/tobago-theme-standard/src/main/resources/META-INF/tobago-config.xml
* (add) tobago-3.0.x/tobago-theme/tobago-theme-standard/src/main/resources/org/apache/myfaces/tobago/renderkit/html/standard/standard/script/tobago-jsf.js


> Some dependencies currently breaking CSP (Content Security Policy) in Tobago 3
> ------------------------------------------------------------------------------
>
>                 Key: TOBAGO-1534
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1534
>             Project: MyFaces Tobago
>          Issue Type: Bug
>          Components: Core, Themes
>            Reporter: Udo Schnurpfeil
>
> Known Problems with CSP:
> * Bootstrap 4: https://github.com/twbs/bootstrap/issues/17964
> * MyFaces jsf.js calls "eval"
> ** copy jsf.js to tobago-jsf.js to
> *** work on removing "eval"
> *** be independent of different implementations (there are problems with MyFaces 2.0,
which are fixed with the 2.2 jsf.js version)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message