[
https://issues.apache.org/jira/browse/SLING-6679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15936696#comment-15936696
]
Karl Pauls commented on SLING-6679:
-----------------------------------
I suppose instead of using the geronimo and johnzon bundles we could consider
going with the javax.json bundles from glassfish. I think they work out of the
box with OSGi and they might handle the xss (SLING-6685) case better (I would
need to check that). However, they are CDDL and not AL. IIRC, we are able to
distribute CDDL in binary so that would work and we could switch to johnzon at
a later point.
> Replace usage of org.apache.sling.commons.json.*
> ------------------------------------------------
>
> Key: SLING-6679
> URL: https://issues.apache.org/jira/browse/SLING-6679
> Project: Sling
> Issue Type: Improvement
> Reporter: Karl Pauls
> Assignee: Karl Pauls
>
> Following the deprecation of org.apache.sling.commons.json (SLING-6536) we
> need to replace its usage everywhere else (at least if we want to be able to
> release other modules that depend on it).
> This is the umbrella issue for getting this done. The idea is to create
> sub-issues with patches for individual components, review the patches, and
> when all are done: close this issue.
> General discussions and problems should go to this issue and specific ones on
> the sub-issue in question.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
