[OPENMEETINGS-2247] CSP should be re-worked

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.0.0-M4
• Fix Version/s: 5.0.0-M4
• Component/s: Builds, UI
• Assignee: Maxim Solodovnik
• Reporter: Maxim Solodovnik
• Created: 09/Apr/20 23:27
• Updated: 19/Apr/20 01:43
• Resolved: 18/Apr/20 00:16

Description

Previously CSP was implemented via
header.csp.frame.options and header.content.security.policy
https://openmeetings.apache.org/GeneralConfiguration.html

Above setting were applied here https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-web/src/main/java/org/apache/openmeetings/web/app/Application.java#L244

This should be re-worked

Issue Links

• links to: GitHub Pull Request #62