Uploaded image for project: 'Struts 2'
  1. Struts 2
  2. WW-5203

lazyPolicyBuilder in DefaultCspSettings is not lazy

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • 6.0.0
    • 6.0.3
    • Core Interceptors
    • None

    Description

      The "lazyPolicyBuilder" inside DefaultCspSettings is supposed to create the CSP-Policy-String only once. But the Variable "hasBeenCalled" isnt set to false anywhere, so the String will be created every time.

      Attachments

        1. struts-ww-5203-normal-supplier.patch
          3 kB
          Guido L. Woestmann
        2. struts-ww-5203-make-lazy.patch
          0.9 kB
          Guido L. Woestmann

        Issue Links

          Activity

            People

              Unassigned Unassigned
              rashomonium Guido L. Woestmann
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 0.5h
                  0.5h