Ajanthan

- Introduced new XSSService to load allowed tags on elements from config.json - Default policy loads default user-generated content policy - Additional allowed tags on elements can be defined in...

Embedding gateway in toolkit to enable continuous dev experience

1

### Describe your problem(s) RIght now developers need to switch to gateway runtime to run the API project and test it. Giving the ability to run the project from the...

Location : https://is.docs.wso2.com/en/latest/learn/my-account/ My account has the ability to list discoverable applications.  This is not docuemented.

**Description:** According to the [usage publisher handler](https://github.com/wso2/carbon-apimgt/blob/a3f91941622aed9bed0bc06884deaad009ce6926/components/apimgt/org.wso2.carbon.apimgt.usage/org.wso2.carbon.apimgt.usage.publisher/src/main/java/org/wso2/carbon/apimgt/usage/publisher/DataPublisherUtil.java#L70 ), the client IP only can be set in 'X-FORWARDED-FOR'(all caps) header from LB/RP but according to the HTTP spec header name should...