Uploaded image for project: 'Struts 2'
  1. Struts 2
  2. WW-5203

lazyPolicyBuilder in DefaultCspSettings is not lazy

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 6.0.0
    • 6.0.3
    • Core Interceptors
    • None

    Description

      The "lazyPolicyBuilder" inside DefaultCspSettings is supposed to create the CSP-Policy-String only once. But the Variable "hasBeenCalled" isnt set to false anywhere, so the String will be created every time.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            Unassigned Unassigned
            rashomonium Guido L. Woestmann
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 0.5h
                0.5h

                Slack

                  Issue deployment