Primefaces security

PrimeFaces Showcase

PrimeFaces Documentation

CSP: Content Security Policy

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. See Content Security Policy for more details.

<context-param>
    <param-name>primefaces.CSP</param-name>
    <param-value>true</param-value>
</context-param>