Jetty configuration wiki page and configuration to help mitigate clickjacking

[Scott Koranda]

> > Please let me know if you would like me to change anything or
> > revert.
> 
> More to the point, I could use feedback or additional requirements
> around the feature in 3.4. It looks like I need to generalize or
> extend the CSP properties to allow that to be set more openly.
> 
> I did look at full CSP but as I noted in JIRA, that appeared to be a
> nightmare of ridiculous proportions based on what I could find on
> portability of non-inline JS.

I thik I found the JIRA:

https://issues.shibboleth.net/jira/browse/IDP-627

In that JIRA you write "I did some research on CSP which I summarized
for the committers." Are you able to share that information?

Also is the proposed 3.4 functionality documented? I apologize if it is
but I looked around and I cannot find it.

Thanks,

Scott K