myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <...@myfaces.apache.org>
Subject [jira] [Commented] (TOBAGO-1791) There should be a "nonce" for each request to protect CSS and JavaScript with CSP
Date Wed, 30 Aug 2017 19:51:00 GMT

    [ https://issues.apache.org/jira/browse/TOBAGO-1791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16147910#comment-16147910
] 

Hudson commented on TOBAGO-1791:
--------------------------------

SUCCESS: Integrated in Jenkins build Tobago Trunk #996 (See [https://builds.apache.org/job/Tobago%20Trunk/996/])
TOBAGO-1791: There should be a "nonce" for each request to protect CSS and JavaScript with
CSP
* impl for JavaScript (lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1806729])
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/ScriptRenderer.java
* (edit) tobago-trunk/tobago-core/src/main/resources/META-INF/tobago-config.xml
* (edit) tobago-trunk/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tobago-config.xml
* (edit) tobago-trunk/tobago-theme/tobago-theme-standard/src/main/resources/META-INF/tobago-config.xml
TOBAGO-1786: Selector to address UIStyle
* first implementation
TOBAGO-1791: There should be a "nonce" for each request to protect CSS and JavaScript with
CSP
* own class to access the nonce, currently stored in the viewMap (lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1806727])
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/component/Attributes.java
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/context/TobagoContext.java
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/component/AbstractUIStyle.java
* (add) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/context/Nonce.java
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/ProgressRenderer.java
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/renderkit/renderer/StyleRenderer.java
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/taglib/component/StyleTagDeclaration.java
* (edit) tobago-trunk/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/util/ResponseUtils.java


> There should be a "nonce" for each request to protect CSS and JavaScript with CSP
> ---------------------------------------------------------------------------------
>
>                 Key: TOBAGO-1791
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1791
>             Project: MyFaces Tobago
>          Issue Type: New Feature
>          Components: Core
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>            Priority: Minor
>
> The "nonce" should also be usable inside the tobago-config.xml -> directive



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message