Files
nomulus/jetty
gbrodmanandGitHub 653da19e53 Implement CSP for the registrar console (#3129)
Implement a hybrid Content Security Policy (CSP) for the Registrar Console
to protect against XSS

- The CspFilter injects the proper headers on the Java backend endpoints
- Uinsg Jetty's HeaderFilter to inject the header for statically-served
  frontend assets

We need to add the ee10-servlets.ini file for Jetty to have acess to the
HeaderFilter class
2026-07-10 18:03:36 +00:00
..
2026-02-18 17:26:51 +00:00