Author: joerghoh
Date: Mon Nov  9 15:31:32 2026
New Revision: 89164

Log:
Release org.apache.sling.xss 2.4.14

Added:
   release/sling/org.apache.sling.xss-2.4.14-javadoc.jar
   release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.asc
   release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.md5
   release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.sha1
   release/sling/org.apache.sling.xss-2.4.14-source-release.zip
   release/sling/org.apache.sling.xss-2.4.14-source-release.zip.asc
   release/sling/org.apache.sling.xss-2.4.14-source-release.zip.md5
   release/sling/org.apache.sling.xss-2.4.14-source-release.zip.sha1
   release/sling/org.apache.sling.xss-2.4.14-source-release.zip.sha512
   release/sling/org.apache.sling.xss-2.4.14-sources.jar
   release/sling/org.apache.sling.xss-2.4.14-sources.jar.asc
   release/sling/org.apache.sling.xss-2.4.14-sources.jar.md5
   release/sling/org.apache.sling.xss-2.4.14-sources.jar.sha1
   release/sling/org.apache.sling.xss-2.4.14.jar
   release/sling/org.apache.sling.xss-2.4.14.jar.asc
   release/sling/org.apache.sling.xss-2.4.14.jar.md5
   release/sling/org.apache.sling.xss-2.4.14.jar.sha1
   release/sling/org.apache.sling.xss-2.4.14.pom
   release/sling/org.apache.sling.xss-2.4.14.pom.asc
   release/sling/org.apache.sling.xss-2.4.14.pom.md5
   release/sling/org.apache.sling.xss-2.4.14.pom.sha1
Deleted:
   release/sling/org.apache.sling.xss-2.4.12-javadoc.jar
   release/sling/org.apache.sling.xss-2.4.12-javadoc.jar.asc
   release/sling/org.apache.sling.xss-2.4.12-javadoc.jar.md5
   release/sling/org.apache.sling.xss-2.4.12-javadoc.jar.sha1
   release/sling/org.apache.sling.xss-2.4.12-source-release.zip
   release/sling/org.apache.sling.xss-2.4.12-source-release.zip.asc
   release/sling/org.apache.sling.xss-2.4.12-source-release.zip.md5
   release/sling/org.apache.sling.xss-2.4.12-source-release.zip.sha1
   release/sling/org.apache.sling.xss-2.4.12-source-release.zip.sha512
   release/sling/org.apache.sling.xss-2.4.12-sources.jar
   release/sling/org.apache.sling.xss-2.4.12-sources.jar.asc
   release/sling/org.apache.sling.xss-2.4.12-sources.jar.md5
   release/sling/org.apache.sling.xss-2.4.12-sources.jar.sha1
   release/sling/org.apache.sling.xss-2.4.12.jar
   release/sling/org.apache.sling.xss-2.4.12.jar.asc
   release/sling/org.apache.sling.xss-2.4.12.jar.md5
   release/sling/org.apache.sling.xss-2.4.12.jar.sha1
   release/sling/org.apache.sling.xss-2.4.12.pom
   release/sling/org.apache.sling.xss-2.4.12.pom.asc
   release/sling/org.apache.sling.xss-2.4.12.pom.md5
   release/sling/org.apache.sling.xss-2.4.12.pom.sha1

Added: release/sling/org.apache.sling.xss-2.4.14-javadoc.jar
==============================================================================
Binary files /dev/null  00:00:00 1970   (empty, because file is newly added) 
and release/sling/org.apache.sling.xss-2.4.14-javadoc.jar  Mon Nov  9 15:31:32 
2026        (r89164) differ

Added: release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.asc
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.asc   Mon Nov  9 
15:31:32 2026        (r89164)
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=439F
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.md5
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.md5   Mon Nov  9 
15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+2ffe3cf02d3a311b274edf185dd71b39
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.sha1
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-javadoc.jar.sha1  Mon Nov  9 
15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+eaca1e0d421d1977c282085be21a1e7fe6c543fd
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14-source-release.zip
==============================================================================
Binary files /dev/null  00:00:00 1970   (empty, because file is newly added) 
and release/sling/org.apache.sling.xss-2.4.14-source-release.zip   Mon Nov  9 
15:31:32 2026        (r89164) differ

Added: release/sling/org.apache.sling.xss-2.4.14-source-release.zip.asc
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-source-release.zip.asc    Mon Nov 
 9 15:31:32 2026        (r89164)
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=5rNV
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.4.14-source-release.zip.md5
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-source-release.zip.md5    Mon Nov 
 9 15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+d18a571d4e03d43953adcf694226aaab
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14-source-release.zip.sha1
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-source-release.zip.sha1   Mon Nov 
 9 15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+5addd1950530d2cdd294a1fd0be9df5eea303435
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14-source-release.zip.sha512
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-source-release.zip.sha512 Mon Nov 
 9 15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+148e1caa56820abc5cda1be45cbe90154a830f1c5e7e6f470444d7092be265b3452d22f1378df885226e9b6be60464b3c9e25403e1242ee863d67dd7b1f24235
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14-sources.jar
==============================================================================
Binary files /dev/null  00:00:00 1970   (empty, because file is newly added) 
and release/sling/org.apache.sling.xss-2.4.14-sources.jar  Mon Nov  9 15:31:32 
2026        (r89164) differ

Added: release/sling/org.apache.sling.xss-2.4.14-sources.jar.asc
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-sources.jar.asc   Mon Nov  9 
15:31:32 2026        (r89164)
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=J4t7
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.4.14-sources.jar.md5
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-sources.jar.md5   Mon Nov  9 
15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+fd146289fca4828febea633cc279dc4d
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14-sources.jar.sha1
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14-sources.jar.sha1  Mon Nov  9 
15:31:32 2026        (r89164)
@@ -0,0 +1 @@
+29b719400d9c59d92df9c3b6ea8fa7bcb5935cca
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14.jar
==============================================================================
Binary files /dev/null  00:00:00 1970   (empty, because file is newly added) 
and release/sling/org.apache.sling.xss-2.4.14.jar  Mon Nov  9 15:31:32 2026     
   (r89164) differ

Added: release/sling/org.apache.sling.xss-2.4.14.jar.asc
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.jar.asc   Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=3iOt
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.4.14.jar.md5
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.jar.md5   Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1 @@
+48e086b6c0f1a8b76ad2da6a310ab1d9
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14.jar.sha1
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.jar.sha1  Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1 @@
+7bd4bf3b48f0f48de7b1c6334e448b60e530dfdb
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14.pom
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.pom       Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1,383 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+  ~ Licensed to the Apache Software Foundation (ASF) under one or
+  ~ more contributor license agreements. See the NOTICE file
+  ~ distributed with this work for additional information regarding
+  ~ copyright ownership. The ASF licenses this file to you under the
+  ~ Apache License, Version 2.0 (the "License"); you may not use
+  ~ this file except in compliance with the License. You may obtain
+  ~ a copy of the License at
+  ~
+  ~ http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+  ~ applicable law or agreed to in writing, software distributed
+  ~ under the License is distributed on an "AS IS" BASIS, WITHOUT
+  ~ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions
+  ~ and limitations under the License.
+  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~-->
+<project xmlns="http://maven.apache.org/POM/4.0.0"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; 
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 
http://maven.apache.org/maven-v4_0_0.xsd";>
+    <modelVersion>4.0.0</modelVersion>
+    <!-- 
======================================================================= -->
+    <!-- P A R E N T   P R O J E C T                                           
  -->
+    <!-- 
======================================================================= -->
+    <parent>
+        <groupId>org.apache.sling</groupId>
+        <artifactId>sling-bundle-parent</artifactId>
+        <version>66</version>
+        <relativePath />
+    </parent>
+
+    <!-- 
======================================================================= -->
+    <!-- P R O J E C T                                                         
  -->
+    <!-- 
======================================================================= -->
+    <artifactId>org.apache.sling.xss</artifactId>
+    <version>2.4.14</version>
+
+    <name>Apache Sling XSS Protection API</name>
+    <description>Apache Sling XSS Protection Bundle providing XSS protection 
based on the OWASP AntiSamy and OWASP Java Encoder libraries.</description>
+
+    <scm>
+        
<connection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</connection>
+        
<developerConnection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</developerConnection>
+        <tag>org.apache.sling.xss-2.4.14</tag>
+        <url>https://github.com/apache/sling-org-apache-sling-xss.git</url>
+    </scm>
+
+    <properties>
+        <sling.java.version>11</sling.java.version>
+        <slf4j.version>1.7.25</slf4j.version>
+        
<project.build.outputTimestamp>1793878413</project.build.outputTimestamp>
+    </properties>
+
+    <!-- 
======================================================================= -->
+    <!-- D E P E N D E N C I E S                                               
  -->
+    <!-- 
======================================================================= -->
+    <dependencies>
+        <dependency>
+            <groupId>com.googlecode.owasp-java-html-sanitizer</groupId>
+            <artifactId>owasp-java-html-sanitizer</artifactId>
+            <version>20260101.1</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.dataformat</groupId>
+            <artifactId>jackson-dataformat-xml</artifactId>
+            <version>2.13.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-annotations</artifactId>
+            <version>2.13.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.owasp.encoder</groupId>
+            <artifactId>encoder</artifactId>
+            <version>1.2.3</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.owasp.esapi</groupId>
+            <artifactId>esapi</artifactId>
+            <version>2.6.2.0</version>
+            <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-lang</groupId>
+                    <artifactId>commons-lang</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>commons-collections</groupId>
+                    <artifactId>commons-collections</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>org.owasp.antisamy</groupId>
+                    <artifactId>antisamy</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>xml-apis</groupId>
+                    <artifactId>xml-apis</artifactId>
+                </exclusion>
+                <exclusion>
+                    <!-- see SLING-13113 -->
+                    <groupId>commons-logging</groupId>
+                    <artifactId>commons-logging</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.xmlgraphics</groupId>
+            <artifactId>batik-css</artifactId>
+            <version>1.17</version>
+            <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>xml-apis</groupId>
+                    <artifactId>xml-apis-ext</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>commons-logging</groupId>
+                    <artifactId>commons-logging</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.w3c.css</groupId>
+            <artifactId>sac</artifactId>
+            <version>1.3</version>
+            <scope>provided</scope>
+        </dependency>
+
+        <dependency>
+            <groupId>javax.servlet</groupId>
+            <artifactId>javax.servlet-api</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>jakarta.json</groupId>
+            <artifactId>jakarta.json-api</artifactId>
+            <version>2.0.2</version>
+            <scope>provided</scope>
+        </dependency>
+
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.framework</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.service.component.annotations</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.annotation.versioning</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.service.metatype.annotations</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.service.component</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-api</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.api</artifactId>
+            <version>2.25.4</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.serviceusermapper</artifactId>
+            <version>1.4.6</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.jetbrains</groupId>
+            <artifactId>annotations</artifactId>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.geronimo.specs</groupId>
+            <artifactId>geronimo-json_1.0_spec</artifactId>
+            <version>1.0-alpha-1</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-text</artifactId>
+            <version>1.10.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>commons-io</groupId>
+            <artifactId>commons-io</artifactId>
+            <version>2.14.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.commons.metrics</artifactId>
+            <version>1.2.6</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.dropwizard.metrics</groupId>
+            <artifactId>metrics-core</artifactId>
+            <version>3.2.3</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.junit.jupiter</groupId>
+            <artifactId>junit-jupiter</artifactId>
+            <version>5.8.2</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.mockito</groupId>
+            <artifactId>mockito-core</artifactId>
+            <version>4.11.0</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.testing.sling-mock.junit5</artifactId>
+            <version>3.0.0</version>
+            <scope>test</scope>
+            <exclusions>
+                <!-- prevent loading older version of the xss api, as their 
OSGi metadata can interfere with tests -->
+                <exclusion>
+                    <groupId>org.apache.sling</groupId>
+                    <artifactId>org.apache.sling.xss</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.service.event</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.service.log</artifactId>
+            <version>1.4.0</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.service.cm</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>org.osgi.resource</artifactId>
+            <version>1.0.1</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-simple</artifactId>
+            <version>1.7.25</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.johnzon</groupId>
+            <artifactId>johnzon-core</artifactId>
+            <version>2.0.2</version>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <!-- 
======================================================================= -->
+    <!-- B U I L D                                                             
  -->
+    <!-- 
======================================================================= -->
+    <build>
+        <pluginManagement>
+            <plugins>
+                <plugin>
+                    <!-- Extend RAT configuration from parent pom -->
+                    <groupId>org.apache.rat</groupId>
+                    <artifactId>apache-rat-plugin</artifactId>
+                    <configuration>
+                        <excludes combine.children="append">
+                            
<exclude>src/main/resources/ESAPI.properties</exclude>
+                            
<exclude>src/main/resources/validation.properties</exclude>
+                        </excludes>
+                    </configuration>
+                </plugin>
+            </plugins>
+        </pluginManagement>
+
+        <plugins>
+            <plugin>
+                <groupId>org.apache.sling</groupId>
+                <artifactId>sling-maven-plugin</artifactId>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-dependency-plugin</artifactId>
+                <executions>
+                    <execution>
+                        <id>unpack</id>
+                        <goals>
+                            <goal>unpack</goal>
+                        </goals>
+                        <phase>prepare-package</phase>
+                        <configuration>
+                            
<outputDirectory>${project.build.directory}/dependencies-classes</outputDirectory>
+                            <artifactItems>
+                                <artifactItem>
+                                    <groupId>org.owasp.esapi</groupId>
+                                    <artifactId>esapi</artifactId>
+                                </artifactItem>
+                            </artifactItems>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <artifactId>maven-resources-plugin</artifactId>
+                <executions>
+                    <execution>
+                        <id>copy-resources</id>
+                        <goals>
+                            <goal>copy-resources</goal>
+                        </goals>
+                        <!-- here the phase you need -->
+                        <phase>prepare-package</phase>
+                        <configuration>
+                            
<outputDirectory>${project.build.outputDirectory}</outputDirectory>
+                            <resources>
+                                <resource>
+                                    
<directory>${project.build.directory}/dependencies-classes</directory>
+                                    <excludes>
+                                        <exclude>**/MANIFEST.MF</exclude>
+                                    </excludes>
+                                </resource>
+                            </resources>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-javadoc-plugin</artifactId>
+                <configuration>
+                    <!-- No javadocs -->
+                    <excludePackageNames>org.owasp.html,
+                        *.impl,
+                        *.impl.*</excludePackageNames>
+                </configuration>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-surefire-plugin</artifactId>
+                <configuration>
+                    <systemProperties>
+                        
<java.util.logging.config.file>src/test/resources/logging.properties</java.util.logging.config.file>
+                    </systemProperties>
+                </configuration>
+            </plugin>
+            <plugin>
+                <groupId>org.jacoco</groupId>
+                <artifactId>jacoco-maven-plugin</artifactId>
+                <configuration>
+                    <includes>
+                        <include>org/apache/sling/xss/**</include>
+                    </includes>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+</project>

Added: release/sling/org.apache.sling.xss-2.4.14.pom.asc
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.pom.asc   Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=QmEG
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.4.14.pom.md5
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.pom.md5   Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1 @@
+d4408c6dd12263fd9b1842441c75c252
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.4.14.pom.sha1
==============================================================================
--- /dev/null   00:00:00 1970   (empty, because file is newly added)
+++ release/sling/org.apache.sling.xss-2.4.14.pom.sha1  Mon Nov  9 15:31:32 
2026        (r89164)
@@ -0,0 +1 @@
+18077f29980bbee3b9747c34f27a471e48825d1c
\ No newline at end of file

Reply via email to