Add CSP protection to views

Description

The HTTPPost encoders need to inject the cspDigester and CSPNonceGenerator into the Velocity context to be used by the internal views of the RP.

Environment

None

is related to

Activity

Henri Mikkonen April 11, 2024 at 9:37 AM

Done on OP and RP

Philip Smart November 2, 2023 at 9:40 AM

I added the cspDigester and cspNonceGenerator to the post encoder and added the digester and generator to the velocity context if available.

Committed to the dev branch dev/JCOMOIDC-90.

Completed

Details

Assignee

Reporter

Components

Fix versions

Created October 27, 2023 at 9:49 AM
Updated April 11, 2024 at 9:37 AM
Resolved April 11, 2024 at 9:37 AM