[
https://issues.apache.org/jira/browse/SLING-6317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15686951#comment-15686951
]
Konrad Windszus commented on SLING-6317:
----------------------------------------
What would be your proposal for exluding whole areas of the repository? Switch
from blacklisting to whitelisting? Even that does not really allow to e.g. make
the filter inactive for "/apps/myproject/images" while staying active for all
other parts of the repository.
Do you have a reference of that discussion on the mailing list or some other
JIRA issue?
> Content Disposition Filter: allow to exclude certain path prefixes
> ------------------------------------------------------------------
>
> Key: SLING-6317
> URL: https://issues.apache.org/jira/browse/SLING-6317
> Project: Sling
> Issue Type: Improvement
> Components: Extensions
> Affects Versions: Security 1.1.2
> Reporter: Konrad Windszus
>
> Currently the property {{sling.content.disposition.excluded.paths}} may only
> contain full resource paths. It would be helpful to exclude certain sections
> of the repository (which are known to be accessible only to trustworthy
> persons) with just one entry, e.g. something like "/apps/myproject/images"
> which is just the prefix. Whenever a resource starts with that prefix, the
> filter should not become active.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
