[jira] [Updated] (SLING-2156) Provide error handling for POST operations
[ https://issues.apache.org/jira/browse/SLING-2156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Antonio Sanso updated SLING-2156: - Attachment: SLING-2156-patch.txt attaching new patch. Highlight from the patch: - it uses the new SPI interface (see SLING 2223) - the SlingPostServlet is not touched anymore - an alternative to commit the patch might be a new documentation 'article' (e.g. How to enable error handling for post operation) Provide error handling for POST operations -- Key: SLING-2156 URL: https://issues.apache.org/jira/browse/SLING-2156 Project: Sling Issue Type: New Feature Components: Servlets Reporter: Antonio Sanso Attachments: SLING-2156-patch.txt, SLING-2156-patch.txt, SLING-2156-patch.txt The error handling mechanism described here [0] doesn't seem to apply also to POST operations. If an error occurs while posting a resource to repository (e.g. avax.jcr.nodetype.ConstraintViolationException: no matching property definition found for) the HtmlResponse.html template is rendered. This can also represent a security issue since information as REFERRER/technology stack are shown. IMHO this page should be at least configurable (if the mechanism in [0] doesn't suite here). [0] http://sling.apache.org/site/errorhandling.html -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (SLING-2156) Provide error handling for POST operations
[ https://issues.apache.org/jira/browse/SLING-2156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Antonio Sanso updated SLING-2156: - Attachment: SLING-2156-patch.txt Highlight from the patch: - a new property is added the to SlingPostServlet in order to enable/disable the error handling (false by default) - it leverages the existing error handling as for [0] - doesn't require any code for the end user (just adding a new jsp file under /sling/errohandloing) [0] http://sling.apache.org/site/errorhandling.html Provide error handling for POST operations -- Key: SLING-2156 URL: https://issues.apache.org/jira/browse/SLING-2156 Project: Sling Issue Type: New Feature Components: Servlets Reporter: Antonio Sanso Attachments: SLING-2156-patch.txt The error handling mechanism described here [0] doesn't seem to apply also to POST operations. If an error occurs while posting a resource to repository (e.g. avax.jcr.nodetype.ConstraintViolationException: no matching property definition found for) the HtmlResponse.html template is rendered. This can also represent a security issue since information as REFERRER/technology stack are shown. IMHO this page should be at least configurable (if the mechanism in [0] doesn't suite here). [0] http://sling.apache.org/site/errorhandling.html -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (SLING-2156) Provide error handling for POST operations
[ https://issues.apache.org/jira/browse/SLING-2156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Antonio Sanso updated SLING-2156: - Attachment: (was: SLING-2156-patch.txt) Provide error handling for POST operations -- Key: SLING-2156 URL: https://issues.apache.org/jira/browse/SLING-2156 Project: Sling Issue Type: New Feature Components: Servlets Reporter: Antonio Sanso The error handling mechanism described here [0] doesn't seem to apply also to POST operations. If an error occurs while posting a resource to repository (e.g. avax.jcr.nodetype.ConstraintViolationException: no matching property definition found for) the HtmlResponse.html template is rendered. This can also represent a security issue since information as REFERRER/technology stack are shown. IMHO this page should be at least configurable (if the mechanism in [0] doesn't suite here). [0] http://sling.apache.org/site/errorhandling.html -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (SLING-2156) Provide error handling for POST operations
[ https://issues.apache.org/jira/browse/SLING-2156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Antonio Sanso updated SLING-2156: - Attachment: SLING-2156-patch.txt attaching revised patch (noticed an error on the previous version). if you like the approach I will also provide integration tests... Provide error handling for POST operations -- Key: SLING-2156 URL: https://issues.apache.org/jira/browse/SLING-2156 Project: Sling Issue Type: New Feature Components: Servlets Reporter: Antonio Sanso Attachments: SLING-2156-patch.txt The error handling mechanism described here [0] doesn't seem to apply also to POST operations. If an error occurs while posting a resource to repository (e.g. avax.jcr.nodetype.ConstraintViolationException: no matching property definition found for) the HtmlResponse.html template is rendered. This can also represent a security issue since information as REFERRER/technology stack are shown. IMHO this page should be at least configurable (if the mechanism in [0] doesn't suite here). [0] http://sling.apache.org/site/errorhandling.html -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
