The Caja support in Shindig is many versions out of date and not particularly maintained. AFAIK nobody uses it.
The Caja project is moving toward a purely client-side JS implementation of Caja that works in modern browsers, and we're planning on removing the server-side Java code sometime this year. Updating Shindig to use the newer Caja is plausible, but seems pointless if nobody is using it. Any objection to removing the Caja from Shindig? I can write up the patch.
