[mojarra-dev] Backport of CSP-related changes?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[mojarra-dev] Backport of CSP-related changes?

From: Jason Lee <jason@xxxxxxxxxxxxxxx>
Date: Wed, 1 Oct 2025 08:23:46 -0500
Arc-authentication-results: i=1; rspamd-867694b6c6-j9jwh; auth=pass smtp.auth=dreamhost smtp.mailfrom=jason@xxxxxxxxxxxxxxx
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1759325038; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: dkim-signature; bh=8SXKZnckPWTW40qbb3x52NULxNElbNU6Z+/osixpQzE=; b=MiFvGL98TfZwZl5z6/TRu79rCiRtXgSu9AXl1d14cCBNBiIIyuBO1SmLkuQe4Mh+H39cdm 65JFdXCJa6sGt/9PdRwImrtI+5cmFuXKv8W9sa4A1Vd5AJ5ikr3lMdZab5iri6JCtIjMMh bVkW4kr1i53pyInrC6J5DhmdrcJTHDzmExCIY2dRCHXbdDcdoNo264bCUSC8uWhbe10m/x JXAzsTG7jYBKRkouBsvcG2Jg2yoDQfYpXtPmUZNJ6a1pCz0ReA8hNivcYfFkNRwR0E8eDS 0EP51hZ9EYBuhUk8ZhnOXAapVINpyBG6ItmPZ2MT/1Lwm/WYDUZ0tSFxa6W/ow==
Arc-seal: i=1; s=arc-2022; d=mailchannels.net; t=1759325038; a=rsa-sha256; cv=none; b=b7qkAVv/HfeSQc025lrDdJvaAGXIKYrUXsss3OMHtAHacIeUbum23Mrd2PurJpBlc5OQEH sWL0ANe9c51CTuVokAzoByMgh7LSB0efpJRJ/DoQf/YyTr4q76RwZ/nvkZfaswNKRH2v3/ 4oyKxX5RehXQ24VCEmBMT1IUwhGddBANQkeRLefECwxSPbc4dIamwM/rL/Ps/d+R37sxRl FGX2zTvuKbkiCZ4WSk0rHOooVISEPE+n8wQatx/i9HwOAq75gwkUJWr7pQi8hgBwTs18tF d29aisccJU6saDu68urdXTprwuJH5dkQiWELd+ldooHrX8ihyzAUxpXe8euZBw==
Delivered-to: mojarra-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/mojarra-dev/>
List-help: <mailto:mojarra-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/mojarra-dev>, <mailto:mojarra-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/mojarra-dev>, <mailto:mojarra-dev-request@eclipse.org?subject=unsubscribe>

Good morning. I’d like to draw everyone’s attention to this PR: https://github.com/eclipse-ee4j/mojarra/pull/5606

It’s a backport of the CSP-related changes targeted for 5.x, iirc. We (IBM) have a customer using 4.0 that is very interested in a fix for this issue, which we really want to deliver, but we’d like to avoid forking if we can. This PR, which I believe is up to date with the 5.x changes, appears to address the issue, so I’d love to get some feedback on it and see if it’s something we can merge into 4.0 (and then, of course, port to 4.1).

Thanks!

Jason Lee
OKC JUG President
https://jasondl.ee
https://twitter.com/jasondlee
http://linkedin.com/in/jasondlee

Prev by Date: Re: [mojarra-dev] h:commandLink and CSP
Previous by thread: [mojarra-dev] h:commandLink and CSP
Index(es):
- Date
- Thread

Breadcrumbs