Remove unused <script> and <noscript> tags in One-Time-Token submit page

Kehrlann · Kehrlann · commit 848873b3aa25 · 2024-09-06T11:24:52.000+02:00
diff --git a/web/src/main/java/org/springframework/security/web/authentication/ui/DefaultOneTimeTokenSubmitPageGeneratingFilter.java b/web/src/main/java/org/springframework/security/web/authentication/ui/DefaultOneTimeTokenSubmitPageGeneratingFilter.java
@@ -116,15 +116,9 @@ public void setLoginProcessingUrl(String loginProcessingUrl) {
 			    <title>One-Time Token Login</title>
 			    <meta charset="utf-8"/>
 			    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>
-			    <meta http-equiv="Content-Security-Policy" content="script-src 'sha256-oZhLbc2kO8b8oaYLrUc7uye1MgVKMyLtPqWR4WtKF+c='"/>
 			{{cssStyle}}
 			  </head>
 			  <body>
-			    <noscript>
-			      <p>
-			        <strong>Note:</strong> Since your browser does not support JavaScript, you must press the Sign In button once to proceed.
-			      </p>
-			    </noscript>
 			    <div class="container">
 			      <form class="login-form" action="{{loginProcessingUrl}}" method="post">
 			        <h2>Please input the token</h2>
diff --git a/web/src/test/java/org/springframework/security/web/authentication/ui/DefaultOneTimeTokenSubmitPageGeneratingFilterTests.java b/web/src/test/java/org/springframework/security/web/authentication/ui/DefaultOneTimeTokenSubmitPageGeneratingFilterTests.java
@@ -110,7 +110,6 @@ void filterThenRenders() throws Exception {
 						    <title>One-Time Token Login</title>
 						    <meta charset="utf-8"/>
 						    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>
-						    <meta http-equiv="Content-Security-Policy" content="script-src 'sha256-oZhLbc2kO8b8oaYLrUc7uye1MgVKMyLtPqWR4WtKF+c='"/>
 						    <style>
 						    /* General layout */
 						    body {
@@ -238,11 +237,6 @@ void filterThenRenders() throws Exception {
 						    </style>
 						  </head>
 						  <body>
-						    <noscript>
-						      <p>
-						        <strong>Note:</strong> Since your browser does not support JavaScript, you must press the Sign In button once to proceed.
-						      </p>
-						    </noscript>
 						    <div class="container">
 						      <form class="login-form" action="/login/another" method="post">
 						        <h2>Please input the token</h2>
