Default extractInlineJavaScript to false.

Per committer consensus, we're disabling this by default for the initial release of Lift 3.
lift · Sep 23, 2016 · 3a2fe97 · 3a2fe97
1 parent 81ec3ca
commit 3a2fe97
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/webkit/src/main/scala/net/liftweb/http/LiftRules.scala b/web/webkit/src/main/scala/net/liftweb/http/LiftRules.scala
@@ -591,7 +591,7 @@ class LiftRules() extends Factory with FormVendor with LazyLoggable {
    * security policy, you can allow inline scripts and set
    * `extractEventAttributes` to false to disable event extraction.
    */
-  @volatile var extractInlineJavaScript: Boolean = true
+  @volatile var extractInlineJavaScript: Boolean = false
 
   /**
    * The attribute used to expose the names of event attributes that were