Re: Custom CSP settings
Lukasz Lenart <[email protected]>
| Newsgroups | gmane.comp.jakarta.struts.user |
|---|---|
| Message-ID | <CAMopvkN9gi=tDwn4dyJJySj38cUCLjSzvRB=0dck-=jbownH1g@mail.gmail.com> |
pon., 17 cze 2024 o 07:27 Nikhil P Kookkiri <[email protected]> napisał(a): > > Hello there, > > The default CSP implementation is allowing inline styles in the JSPs. I am looking for documentation that will help me use custom CSP settings. Since Struts 6.2.0 you can use CspSettingsAware interface to configure this by action [1], in Struts 6.5.0 a global (per interceptor stack) cspSettingsClassName [1] will be available. [1] https://struts.apache.org/core-developers/csp-interceptor#action-aware [2] https://struts.apache.org/core-developers/csp-interceptor#parameters Cheers Lukasz