commit

src/main/java/com/budwk/app/web/commons/proc/CspProcessor.java

@@ -15,7 +15,7 @@ import java.util.Base64;
 public class CspProcessor extends AbstractProcessor {
 
 	public void process(ActionContext ac) throws Throwable {
-		// 1. 生成 nonce
+		/*// 1. 生成 nonce
 		String nonce = Base64.getEncoder().encodeToString(
 				java.security.SecureRandom.getInstanceStrong().generateSeed(16)
 		);
@@ -34,7 +34,7 @@ public class CspProcessor extends AbstractProcessor {
 				"frame-ancestors 'self'; " +
 				"object-src 'self';";
 
-		ac.getResponse().setHeader("Content-Security-Policy", csp);
+		ac.getResponse().setHeader("Content-Security-Policy", csp);*/
 
 		doNext(ac);
 	}