Dan Klco created SLING-12324:
--------------------------------
Summary: Referrer Filter Reference Policy Should be Dynamic
Key: SLING-12324
URL: https://issues.apache.org/jira/browse/SLING-12324
Project: Sling
Issue Type: Improvement
Components: Sling Security
Affects Versions: Security 1.2.0
Reporter: Dan Klco
Fix For: Security 1.2.2
The Reference Policy for amendments to the ReferrerFilter:
[https://github.com/apache/sling-org-apache-sling-security/blob/master/src/main/java/org/apache/sling/security/impl/ReferrerFilter.java#L283C39-L283C60]
are set to
{{policyOption = ReferencePolicyOption.GREEDY, cardinality =
ReferenceCardinality.MULTIPLE}} so they will pick up multiple amendments if
available at initialization, however because the ReferencePolicy is still
static, new amendments available after the component initializes will not be
detected.
To support this, the ReferencePolicy should be set to Dynamic. This will also
require changing from constructor based parameters to bind parameters.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
