Skip to content

Commit

Permalink
Merge pull request #218 from apache/feature/WW-5373-report-action
Browse files Browse the repository at this point in the history
[WW-5373 Adds] a section about report action
  • Loading branch information
lukaszlenart authored Dec 18, 2023
2 parents db4780b + 66ab805 commit 2e1e2ce
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions source/core-developers/csp-interceptor.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,14 @@ CSP is now supported by all major browsers. [More information about CSP](https:/
is going to be enforced.
- `reportUri` - an uri under, which the violations have to be reported.

## Report action

To receive reports about violations against CSP an abstract `CspReportAction` action has been created, which you can
extend to process the reports. When extending the action you must implement `processReport(String)` to process the report.
Read JavaDoc of the action for more details.

> Note: the action must always return an HTTP status `204`.
## Action aware

Since Struts 6.2.0 it is possible to configure the CSP interceptor by providing the an instance of `CspSettings` interface.
Expand Down

0 comments on commit 2e1e2ce

Please sign in to comment.