Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy security headers #9385

Closed
eddumelendez opened this issue Jan 28, 2021 · 1 comment · Fixed by #10141
Closed

Add Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy security headers #9385

eddumelendez opened this issue Jan 28, 2021 · 1 comment · Fixed by #10141
Assignees
@marcusdacoregio
Labels
in: config An issue in spring-security-config type: enhancement A general enhancement
Milestone
5.7.0-M1

Comments

@eddumelendez
Copy link
Contributor

Expected Behavior

Allow to add Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy headers via dsl and xml.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Opener-Policy
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Embedder-Policy

Current Behavior

This currently can be provided by https://docs.spring.io/spring-security/site/docs/5.5.x/reference/html5/#headers-custom

Context

Given the values provided by those headers, it would great to provide them explicitly.

I can provide a PR for this in the next weeks if adding them make sense.
@eddumelendez eddumelendez added status: waiting-for-triage An issue we've not yet triaged type: enhancement A general enhancement labels Jan 28, 2021
@jzheaux jzheaux assigned marcusdacoregio and unassigned rwinch May 5, 2021
@marcusdacoregio marcusdacoregio removed the status: waiting-for-triage An issue we've not yet triaged label May 6, 2021
@marcusdacoregio marcusdacoregio added the in: config An issue in spring-security-config label Jul 12, 2021
@marcusdacoregio marcusdacoregio mentioned this issue Jul 19, 2021
Closed
@marcusdacoregio marcusdacoregio mentioned this issue Jul 27, 2021
Merged
marcusdacoregio added a commit to marcusdacoregio/spring-security that referenced this issue Dec 7, 2021
@marcusdacoregio
Add Cross Origin Policies headers
aa3ee9d 
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers

Closes spring-projectsgh-9385, spring-projectsgh-10118
eleftherias pushed a commit that referenced this issue Dec 7, 2021
@marcusdacoregio @eleftherias
Add Cross Origin Policies headers
65426a4 
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers

Closes gh-9385, gh-10118
@eleftherias
Copy link
Contributor

Closed via #10141

@eleftherias eleftherias added this to the 5.7.0-M1 milestone Dec 7, 2021
eleftherias pushed a commit that referenced this issue Dec 8, 2021
@marcusdacoregio @eleftherias
Add Cross Origin Policies headers
0beb725 
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers

Closes gh-9385, gh-10118
eleftherias added a commit that referenced this issue Dec 8, 2021
@eleftherias
Correct imports to jakarta
c68a75b 
Issue gh-9385, gh-10118
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@marcusdacoregio marcusdacoregio

Labels
in: config An issue in spring-security-config type: enhancement A general enhancement
Projects
None yet
Milestone
5.7.0-M1
Development

Successfully merging a pull request may close this issue.

Add Cross Origin Policies headers DSL support marcusdacoregio/spring-security
4 participants
@rwinch @eddumelendez @eleftherias @marcusdacoregio