Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add Support Credentialless COEP Header

Browse Source 
Closes gh-16991

Signed-off-by: Max Batischev <mblancer@mail.ru>
This commit is contained in:
Max Batischev
2025-05-13 16:00:59 +03:00
committed by Josh Cummings
parent 9ba5c7b2ce
commit f4b8e2421a
4 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
config/src/main/resources/org/springframework/security/config/spring-security-7.0.rnc
View File

@@ -1308,7 +1308,7 @@ cross-origin-embedder-policy =
element cross-origin-embedder-policy {cross-origin-embedder-policy-options.attlist,empty}
cross-origin-embedder-policy-options.attlist &=
## The policies for the Cross-Origin-Embedder-Policy header.
attribute policy {"unsafe-none","require-corp"}?
attribute policy {"unsafe-none","require-corp", "credentialless"}?
cross-origin-resource-policy =
## Adds support for Cross-Origin-Resource-Policy header

1
config/src/main/resources/org/springframework/security/config/spring-security-7.0.xsd
View File

@@ -3668,6 +3668,7 @@
<xs:restriction base="xs:token">
<xs:enumeration value="unsafe-none"/>
<xs:enumeration value="require-corp"/>
<xs:enumeration value="credentialless"/>
</xs:restriction>
</xs:simpleType>
</xs:attribute>