Author: rombert Date: Mon Sep 8 15:00:32 2025 New Revision: 79144 Log: xss 2.4.8
Added: release/sling/org.apache.sling.xss-2.4.8-javadoc.jar (contents, props changed) release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.asc (contents, props changed) release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.md5 release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.sha1 release/sling/org.apache.sling.xss-2.4.8-source-release.zip (contents, props changed) release/sling/org.apache.sling.xss-2.4.8-source-release.zip.asc (contents, props changed) release/sling/org.apache.sling.xss-2.4.8-source-release.zip.md5 release/sling/org.apache.sling.xss-2.4.8-source-release.zip.sha1 release/sling/org.apache.sling.xss-2.4.8-source-release.zip.sha512 release/sling/org.apache.sling.xss-2.4.8-sources.jar (contents, props changed) release/sling/org.apache.sling.xss-2.4.8-sources.jar.asc (contents, props changed) release/sling/org.apache.sling.xss-2.4.8-sources.jar.md5 release/sling/org.apache.sling.xss-2.4.8-sources.jar.sha1 release/sling/org.apache.sling.xss-2.4.8.jar (contents, props changed) release/sling/org.apache.sling.xss-2.4.8.jar.asc (contents, props changed) release/sling/org.apache.sling.xss-2.4.8.jar.md5 release/sling/org.apache.sling.xss-2.4.8.jar.sha1 release/sling/org.apache.sling.xss-2.4.8.pom release/sling/org.apache.sling.xss-2.4.8.pom.asc (contents, props changed) release/sling/org.apache.sling.xss-2.4.8.pom.md5 release/sling/org.apache.sling.xss-2.4.8.pom.sha1 Deleted: release/sling/org.apache.sling.xss-2.4.6-javadoc.jar release/sling/org.apache.sling.xss-2.4.6-javadoc.jar.asc release/sling/org.apache.sling.xss-2.4.6-javadoc.jar.md5 release/sling/org.apache.sling.xss-2.4.6-javadoc.jar.sha1 release/sling/org.apache.sling.xss-2.4.6-source-release.zip release/sling/org.apache.sling.xss-2.4.6-source-release.zip.asc release/sling/org.apache.sling.xss-2.4.6-source-release.zip.md5 release/sling/org.apache.sling.xss-2.4.6-source-release.zip.sha1 release/sling/org.apache.sling.xss-2.4.6-source-release.zip.sha512 release/sling/org.apache.sling.xss-2.4.6-sources.jar release/sling/org.apache.sling.xss-2.4.6-sources.jar.asc release/sling/org.apache.sling.xss-2.4.6-sources.jar.md5 release/sling/org.apache.sling.xss-2.4.6-sources.jar.sha1 release/sling/org.apache.sling.xss-2.4.6.jar release/sling/org.apache.sling.xss-2.4.6.jar.asc release/sling/org.apache.sling.xss-2.4.6.jar.md5 release/sling/org.apache.sling.xss-2.4.6.jar.sha1 release/sling/org.apache.sling.xss-2.4.6.pom release/sling/org.apache.sling.xss-2.4.6.pom.asc release/sling/org.apache.sling.xss-2.4.6.pom.md5 release/sling/org.apache.sling.xss-2.4.6.pom.sha1 Added: release/sling/org.apache.sling.xss-2.4.8-javadoc.jar ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.asc ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.md5 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.md5 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +e46606ef2677d01d3d3b3d9c4cf1bca1 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.sha1 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-javadoc.jar.sha1 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +31f28a5c7c1218d3c78cc20680f703c27063b8d0 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8-source-release.zip ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8-source-release.zip.asc ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8-source-release.zip.md5 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-source-release.zip.md5 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +c4a23688e022d2636950e7c6b0669a63 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8-source-release.zip.sha1 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-source-release.zip.sha1 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +928e00cffaac203ebc202265a249bd8bb01a6e71 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8-source-release.zip.sha512 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-source-release.zip.sha512 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +de0723e74917115208311879b37d53d2702b5737a3f87ef3ac81d88b47b3de1ea862e4189df73066b32b8c2f1f3838f00b7d07d87a7f7838f20e0c46d2b81ada \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8-sources.jar ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8-sources.jar.asc ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8-sources.jar.md5 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-sources.jar.md5 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +2b805c6091c8f3cd3851950f4e14a52a \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8-sources.jar.sha1 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8-sources.jar.sha1 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +75379dc9e4992515fd56cca7c8499fdbd8ca42d5 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8.jar ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8.jar.asc ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8.jar.md5 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8.jar.md5 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +bbdec14658c96a755e9d44e5301ec6d4 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8.jar.sha1 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8.jar.sha1 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +270c13ce47c2516c7cea91abfa86d093e2f9c0df \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8.pom ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8.pom Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1,373 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + ~ Licensed to the Apache Software Foundation (ASF) under one or + ~ more contributor license agreements. See the NOTICE file + ~ distributed with this work for additional information regarding + ~ copyright ownership. The ASF licenses this file to you under the + ~ Apache License, Version 2.0 (the "License"); you may not use + ~ this file except in compliance with the License. You may obtain + ~ a copy of the License at + ~ + ~ http://www.apache.org/licenses/LICENSE-2.0 Unless required by + ~ applicable law or agreed to in writing, software distributed + ~ under the License is distributed on an "AS IS" BASIS, WITHOUT + ~ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + ~ See the License for the specific language governing permissions + ~ and limitations under the License. + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~--> +<project xmlns="http://maven.apache.org/POM/4.0.0"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd";> + <modelVersion>4.0.0</modelVersion> + <!-- ======================================================================= --> + <!-- P A R E N T P R O J E C T --> + <!-- ======================================================================= --> + <parent> + <groupId>org.apache.sling</groupId> + <artifactId>sling-bundle-parent</artifactId> + <version>62</version> + <relativePath /> + </parent> + + <!-- ======================================================================= --> + <!-- P R O J E C T --> + <!-- ======================================================================= --> + <artifactId>org.apache.sling.xss</artifactId> + <version>2.4.8</version> + + <name>Apache Sling XSS Protection API</name> + <description>Apache Sling XSS Protection Bundle providing XSS protection based on the OWASP AntiSamy and OWASP Java Encoder libraries.</description> + + <scm> + <connection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</connection> + <developerConnection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</developerConnection> + <tag>org.apache.sling.xss-2.4.8</tag> + <url>https://github.com/apache/sling-org-apache-sling-xss.git</url> + </scm> + + <properties> + <sling.java.version>11</sling.java.version> + <project.build.outputTimestamp>1757081625</project.build.outputTimestamp> + </properties> + + <!-- ======================================================================= --> + <!-- D E P E N D E N C I E S --> + <!-- ======================================================================= --> + <dependencies> + <dependency> + <groupId>com.googlecode.owasp-java-html-sanitizer</groupId> + <artifactId>owasp-java-html-sanitizer</artifactId> + <version>20240325.1</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>com.fasterxml.jackson.dataformat</groupId> + <artifactId>jackson-dataformat-xml</artifactId> + <version>2.13.0</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>com.fasterxml.jackson.core</groupId> + <artifactId>jackson-annotations</artifactId> + <version>2.13.0</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.owasp.encoder</groupId> + <artifactId>encoder</artifactId> + <version>1.2.3</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.owasp.esapi</groupId> + <artifactId>esapi</artifactId> + <version>2.6.0.0</version> + <scope>provided</scope> + <exclusions> + <exclusion> + <groupId>commons-lang</groupId> + <artifactId>commons-lang</artifactId> + </exclusion> + <exclusion> + <groupId>commons-collections</groupId> + <artifactId>commons-collections</artifactId> + </exclusion> + <exclusion> + <groupId>org.owasp.antisamy</groupId> + <artifactId>antisamy</artifactId> + </exclusion> + <exclusion> + <groupId>xml-apis</groupId> + <artifactId>xml-apis</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>org.apache.xmlgraphics</groupId> + <artifactId>batik-css</artifactId> + <version>1.17</version> + <scope>provided</scope> + <exclusions> + <exclusion> + <groupId>xml-apis</groupId> + <artifactId>xml-apis-ext</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>org.w3c.css</groupId> + <artifactId>sac</artifactId> + <version>1.3</version> + <scope>provided</scope> + </dependency> + + <dependency> + <groupId>javax.servlet</groupId> + <artifactId>javax.servlet-api</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>jakarta.json</groupId> + <artifactId>jakarta.json-api</artifactId> + <version>2.0.2</version> + <scope>provided</scope> + </dependency> + + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.framework</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.service.component.annotations</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.annotation.versioning</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.service.metatype.annotations</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.service.component</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.slf4j</groupId> + <artifactId>slf4j-api</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.apache.sling</groupId> + <artifactId>org.apache.sling.api</artifactId> + <version>2.25.4</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.apache.sling</groupId> + <artifactId>org.apache.sling.serviceusermapper</artifactId> + <version>1.4.6</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.jetbrains</groupId> + <artifactId>annotations</artifactId> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.apache.geronimo.specs</groupId> + <artifactId>geronimo-json_1.0_spec</artifactId> + <version>1.0-alpha-1</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.apache.commons</groupId> + <artifactId>commons-text</artifactId> + <version>1.10.0</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>commons-io</groupId> + <artifactId>commons-io</artifactId> + <version>2.14.0</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.apache.sling</groupId> + <artifactId>org.apache.sling.commons.metrics</artifactId> + <version>1.2.6</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>io.dropwizard.metrics</groupId> + <artifactId>metrics-core</artifactId> + <version>3.2.3</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.junit.jupiter</groupId> + <artifactId>junit-jupiter</artifactId> + <version>5.8.2</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.mockito</groupId> + <artifactId>mockito-core</artifactId> + <version>4.11.0</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.apache.sling</groupId> + <artifactId>org.apache.sling.testing.sling-mock.junit5</artifactId> + <version>3.0.0</version> + <scope>test</scope> + <exclusions> + <!-- prevent loading older version of the xss api, as their OSGi metadata can interfere with tests --> + <exclusion> + <groupId>org.apache.sling</groupId> + <artifactId>org.apache.sling.xss</artifactId> + </exclusion> + </exclusions> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.service.event</artifactId> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.service.log</artifactId> + <version>1.4.0</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.service.cm</artifactId> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.osgi</groupId> + <artifactId>org.osgi.resource</artifactId> + <version>1.0.1</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.slf4j</groupId> + <artifactId>slf4j-simple</artifactId> + <version>1.7.25</version> + <scope>test</scope> + </dependency> + <dependency> + <groupId>org.glassfish</groupId> + <artifactId>jakarta.json</artifactId> + <version>2.0.1</version> + <scope>test</scope> + </dependency> + </dependencies> + + <!-- ======================================================================= --> + <!-- B U I L D --> + <!-- ======================================================================= --> + <build> + <pluginManagement> + <plugins> + <plugin> + <!-- Extend RAT configuration from parent pom --> + <groupId>org.apache.rat</groupId> + <artifactId>apache-rat-plugin</artifactId> + <configuration> + <excludes combine.children="append"> + <exclude>src/main/resources/ESAPI.properties</exclude> + <exclude>src/main/resources/validation.properties</exclude> + </excludes> + </configuration> + </plugin> + </plugins> + </pluginManagement> + + <plugins> + <plugin> + <groupId>org.apache.sling</groupId> + <artifactId>sling-maven-plugin</artifactId> + </plugin> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-dependency-plugin</artifactId> + <executions> + <execution> + <id>unpack</id> + <goals> + <goal>unpack</goal> + </goals> + <phase>prepare-package</phase> + <configuration> + <outputDirectory>${project.build.directory}/dependencies-classes</outputDirectory> + <artifactItems> + <artifactItem> + <groupId>org.owasp.esapi</groupId> + <artifactId>esapi</artifactId> + </artifactItem> + </artifactItems> + </configuration> + </execution> + </executions> + </plugin> + <plugin> + <artifactId>maven-resources-plugin</artifactId> + <executions> + <execution> + <id>copy-resources</id> + <goals> + <goal>copy-resources</goal> + </goals> + <!-- here the phase you need --> + <phase>prepare-package</phase> + <configuration> + <outputDirectory>${project.build.outputDirectory}</outputDirectory> + <resources> + <resource> + <directory>${project.build.directory}/dependencies-classes</directory> + <excludes> + <exclude>**/MANIFEST.MF</exclude> + </excludes> + </resource> + </resources> + </configuration> + </execution> + </executions> + </plugin> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-javadoc-plugin</artifactId> + <configuration> + <!-- No javadocs --> + <excludePackageNames>org.owasp.html, + *.impl, + *.impl.*</excludePackageNames> + </configuration> + </plugin> + <plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-surefire-plugin</artifactId> + <configuration> + <systemProperties> + <java.util.logging.config.file>src/test/resources/logging.properties</java.util.logging.config.file> + </systemProperties> + </configuration> + </plugin> + <plugin> + <groupId>org.jacoco</groupId> + <artifactId>jacoco-maven-plugin</artifactId> + <configuration> + <includes> + <include>org/apache/sling/xss/**</include> + </includes> + </configuration> + </plugin> + </plugins> + </build> +</project> Added: release/sling/org.apache.sling.xss-2.4.8.pom.asc ============================================================================== Binary file. No diff available. Added: release/sling/org.apache.sling.xss-2.4.8.pom.md5 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8.pom.md5 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +0219f24bf6219b5ad4f9561c49b71ff8 \ No newline at end of file Added: release/sling/org.apache.sling.xss-2.4.8.pom.sha1 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ release/sling/org.apache.sling.xss-2.4.8.pom.sha1 Mon Sep 8 15:00:32 2025 (r79144) @@ -0,0 +1 @@ +cd5ba43e2cb420735eae7d09257172a9560bf8ec \ No newline at end of file
