In WICKET-6727 a customizable CSP is added, but still disabled because many parts of Wicket still don't work well with CSP. WICKET-6687 tracks these issues. Once these issues are resolved, CSP can be enabled by default.
is a child of
WICKET-6687Cleanup the code from attribute inline styles and attribute inline scripts