[ 
https://issues.apache.org/jira/browse/SLING-12005?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Carsten Ziegeler resolved SLING-12005.
--------------------------------------
      Assignee: Carsten Ziegeler
    Resolution: Fixed

https://github.com/apache/sling-org-apache-sling-xss/commit/ed2c897b3fde58b6408b2aba8ebc988e5480e34d

> XSS bundle should not embed org.owasp.encoder
> ---------------------------------------------
>
>                 Key: SLING-12005
>                 URL: https://issues.apache.org/jira/browse/SLING-12005
>             Project: Sling
>          Issue Type: New Feature
>          Components: XSS Protection API
>            Reporter: Carsten Ziegeler
>            Assignee: Carsten Ziegeler
>            Priority: Major
>             Fix For: XSS Protection API 2.3.10
>
>
> Currently the XSS bundle embeds the OSGi bundle org.owasp.encoder:encoder . 
> As that is already a bundle, it is better to not embed it. This makes 
> updating that code easier and if other modules use it avoids duplicate 
> deployments (in potentially different versions)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to