Converting an angular project to a maven web application
up vote
-1
down vote
favorite
As part of addressing click hijacking vulnerability, we added CSP's frame-ancestors header as a meta tag in angular's index.html page. But this did not work. Upon researching we came to know that frame-ancestors cannot be added as meta tag and should be returned as a http header from the server. We have two options. Write a Http Filter and add CSP header to the response. Configure the webserver to add the CSP header to every response. Our architects and the server team decided to go with the first option. As part of the solution, we have manually built the angular application, copied the resources under dist directory to a maven web application, added the CSP filter in the web application and served the application. Thus fixing the click hijacking vulnerability. Now we need a solutio...
