[jira] [Updated] (SLING-3443) Parameter based redirection in FormAuthenticationHandler should not handle absolute urls

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3443?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler updated SLING-3443: Fix Version/s: Form Based Authentication 1.0.6 Parameter based redirection in

[jira] [Updated] (SLING-3427) Incorrect handling of NamespaceMapper bindings within SlingServerRepositoryManager

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3427?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler updated SLING-3427: Fix Version/s: (was: JCR Jackrabbit Server 2.1.2) JCR Jackrabbit

[VOTE] Release Apache Sling JCR Resource 2.3.4

2014-03-11 Thread Carsten Ziegeler
Hi, this vote is about the release of Apache Sling JCR Resource 2.3.4 which contains an important bug fix: https://issues.apache.org/jira/browse/SLING-3445 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1033 You can use this UNIX script to download the

[jira] [Assigned] (SLING-3443) Parameter based redirection in FormAuthenticationHandler should not handle absolute urls

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3443?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler reassigned SLING-3443: --- Assignee: Carsten Ziegeler Parameter based redirection in FormAuthenticationHandler

[GitHub] sling pull request: SLING-3443: Parameter based redirection vulner...

2014-03-11 Thread bond-
Github user bond- closed the pull request at: https://github.com/apache/sling/pull/12 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is

[jira] [Commented] (SLING-3443) Parameter based redirection in FormAuthenticationHandler should not handle absolute urls

2014-03-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3443?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13930183#comment-13930183 ] ASF GitHub Bot commented on SLING-3443: --- Github user bond- closed the pull request

[jira] [Commented] (SLING-3439) SlingRequestProcessor.processRequest(httpServletRequest, httpServletResponse, resourceResolver) no longer passes request params through

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3439?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13930184#comment-13930184 ] Carsten Ziegeler commented on SLING-3439: - Rev 1576258 : If added an additional

[jira] [Resolved] (SLING-3443) Parameter based redirection in FormAuthenticationHandler should not handle absolute urls

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3443?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler resolved SLING-3443. - Resolution: Fixed Parameter based redirection in FormAuthenticationHandler should not

[jira] [Resolved] (SLING-3439) SlingRequestProcessor.processRequest(httpServletRequest, httpServletResponse, resourceResolver) no longer passes request params through

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler resolved SLING-3439. - Resolution: Fixed SlingRequestProcessor.processRequest(httpServletRequest,

[VOTE] Release Apache Sling Engine 2.3.2

2014-03-11 Thread Carsten Ziegeler
Hi, this vote is about the release of Apache Sling Engine 2.3.2 which contains an important bug fix: https://issues.apache.org/jira/browse/SLING-3439 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1034 You can use this UNIX script to download the release

buildbot failure in ASF Buildbot on sling-trunk

2014-03-11 Thread buildbot
The Buildbot has detected a new failure on builder sling-trunk while building ASF Buildbot. Full details are available at: http://ci.apache.org/builders/sling-trunk/builds/405 Buildbot URL: http://ci.apache.org/ Buildslave for this Build: osiris_ubuntu Build Reason: scheduler Build Source

[jira] [Created] (SLING-3446) [discovery] stale connector - improve osgi dependencies of ConnectorRegistryImpl to avoid IllegalArgumentException on bundle de/activation

2014-03-11 Thread Stefan Egli (JIRA)
Stefan Egli created SLING-3446: -- Summary: [discovery] stale connector - improve osgi dependencies of ConnectorRegistryImpl to avoid IllegalArgumentException on bundle de/activation Key: SLING-3446 URL:

[jira] [Commented] (SLING-3439) SlingRequestProcessor.processRequest(httpServletRequest, httpServletResponse, resourceResolver) no longer passes request params through

2014-03-11 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3439?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13930480#comment-13930480 ] Carsten Ziegeler commented on SLING-3439: - Additional comment: the problem did

Re: [VOTE] Release Apache Sling Engine 2.3.2

2014-03-11 Thread Felix Meschberger
+1 Regards Felix Am 11.03.2014 um 14:38 schrieb Carsten Ziegeler cziege...@apache.org: Hi, this vote is about the release of Apache Sling Engine 2.3.2 which contains an important bug fix: https://issues.apache.org/jira/browse/SLING-3439 Staging repository:

[jira] [Created] (SLING-3447) Improve documentation of sling

2014-03-11 Thread Ravi Teja (JIRA)
Ravi Teja created SLING-3447: Summary: Improve documentation of sling Key: SLING-3447 URL: https://issues.apache.org/jira/browse/SLING-3447 Project: Sling Issue Type: Improvement

[jira] [Commented] (SLING-3447) Improve documentation of sling

2014-03-11 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3447?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13930496#comment-13930496 ] Robert Munteanu commented on SLING-3447: [~bond_] - contributions for

Re: [VOTE] Release Apache Sling JCR Resource 2.3.4

2014-03-11 Thread Oliver Lietz
On Tuesday 11 March 2014 09:32:26 Carsten Ziegeler wrote: Hi, this vote is about the release of Apache Sling JCR Resource 2.3.4 which contains an important bug fix: https://issues.apache.org/jira/browse/SLING-3445 +1 O.

Re: [VOTE] Release Apache Sling Engine 2.3.2

2014-03-11 Thread Oliver Lietz
On Tuesday 11 March 2014 14:38:43 Carsten Ziegeler wrote: Hi, this vote is about the release of Apache Sling Engine 2.3.2 which contains an important bug fix: https://issues.apache.org/jira/browse/SLING-3439 +1 O.

[jira] [Commented] (SLING-3435) ResourceAccessSecurity does not secure access for update operations

2014-03-11 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-3435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13930946#comment-13930946 ] Mike Müller commented on SLING-3435: Hi Marius Thank you very much for the tests. I

Sling Authentication Handler Flow

2014-03-11 Thread Srikanth K
Hi Team, We need some help in understanding the Authentication Handler. We have developed a simple Authentication Handler and mentioned the path as /j_secutiry_check. But we observed that the request has been processed for both / and /j_security_check paths. *Can we stop the flow in between