Wicket migration documentation

Scope

• Do users need to configure anything extra with this migration?
  • The domain(s) of OpenUI extension(s) should be configured in the Content Security Policy
• Do we have captured how users can make use of the migration to enable XSS protection?
  • The Content Security Policy is configured in the repository at /hippo:configuration/hippo:modules/application-settings/hippo:moduleconfig/content-security-policy
  • We have not enabled the usage of a nonce for <script> and <style> elements because of "legacy" libraries like ExtJS
• Any other documentation that we need to write down?
  • See the attached .md file