Update the Java Play Framework generator to version 2.6.3 (#6356)

samples/server/petstore/java-play-framework-no-exception-handling/conf/application.conf

@@ -15,6 +15,8 @@
 # HOCON will fall back to substituting environment variable:
 #mykey = ${JAVA_HOME}
 
+play.filters.headers.contentSecurityPolicy=null
+
 
 ## Akka
 # https://www.playframework.com/documentation/latest/ScalaAkka#Configuration
@@ -41,7 +43,7 @@ akka {
 # ~~~~~
 # The secret key is used to sign Play's session cookie.
 # This must be changed for production, but we don't recommend you change it in this file.
-play.crypto.secret = "changeme"
+play.http.secret.key = "changeme"
 
 ## Modules
 # https://www.playframework.com/documentation/latest/Modules
@@ -60,6 +62,11 @@ play.modules {
 # If there are any built-in modules that you want to disable, you can list them here.
 }
 
+play.assets {
+path = "/public"
+urlPrefix = "/assets"
+}
+
 ## IDE
 # https://www.playframework.com/documentation/latest/IDE
 # ~~~~~
@@ -259,7 +266,8 @@ csrf {
 # ~~~~~
 # Defines security headers that prevent XSS attacks.
 # If enabled, then all options are set to the below configuration by default:
-headers {
+play.filters.headers {
+
 # The X-Frame-Options header. If null, the header is not set.
 #frameOptions = "DENY"
 
@@ -273,7 +281,13 @@ headers {
 #permittedCrossDomainPolicies = "master-only"
 
 # The Content-Security-Policy header. If null, the header is not set.
-#contentSecurityPolicy = "default-src 'self'"
+contentSecurityPolicy = "default-src 'self'"
+
+# The Referrer-Policy header. If null, the header is not set.
+#referrerPolicy = "origin-when-cross-origin, strict-origin-when-cross-origin"
+
+# If true, allow an action to use .withHeaders to replace one or more of the above headers
+#allowActionSpecificHeaders = false
 }
 
 ## Allowed hosts filter configuration

samples/server/petstore/java-play-framework-no-exception-handling/conf/routes

@@ -32,4 +32,5 @@ GET     /v2/user/logout                     controllers.UserApiController.logout
 PUT     /v2/user/:username                     controllers.UserApiController.updateUser(username: String)
 
 # Map static resources from the /public folder to the /assets URL path
-GET     /assets/*file               controllers.Assets.versioned(path="/public", file: Asset)
+GET /assets/*file           controllers.Assets.at(file)
+GET /versionedAssets/*file  controllers.Assets.versioned(file)