[ 
https://issues.apache.org/jira/browse/SLING-10953?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17471963#comment-17471963
 ] 

Robert Munteanu commented on SLING-10953:
-----------------------------------------

[~kwin] - I missed your Saxon comment. To be honest, I would like to touch the 
XML parsing code as little as possible, given a) the issues that we had on 
exotic platforms

- SLING-8328
- SLING-8321

(and maybe others I'm not aware of) and b) the plan to get rid of AntiSamy 
altogether SLING-7231 .

> Update dependency Antisamy version from 1.5.10 to 1.6.4
> -------------------------------------------------------
>
>                 Key: SLING-10953
>                 URL: https://issues.apache.org/jira/browse/SLING-10953
>             Project: Sling
>          Issue Type: Improvement
>            Reporter: Tatyana Vogel
>            Assignee: Robert Munteanu
>            Priority: Major
>             Fix For: XSS Protection API 2.2.18
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> The latest version of AntiSamy is 1.6.4, see 
> https://search.maven.org/search?q=g:org.owasp.antisamy%20AND%20a:antisamy . 
> We should upgrade to that version, since we embed the AntiSamy bundle and 
> there is no other way for consumers of the bundle to upgrade.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to