[
https://issues.apache.org/jira/browse/SLING-8266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16765004#comment-16765004
]
Robert Munteanu commented on SLING-8266:
----------------------------------------
{quote} Then we can change the SlingFunctions to use xssapi in a similar way as
you did with your patch for the XSSSupport. This way the jsp taglib does not
rely on the compat bundle{quote}
That is basically reimplementing the same functionality outside of the compat
bundle (we need to handle the same string values, but not backed by the same
enum since it moved to a different bundle). Is that what you're suggesting?
> Stop embedding ESAPI
> --------------------
>
> Key: SLING-8266
> URL: https://issues.apache.org/jira/browse/SLING-8266
> Project: Sling
> Issue Type: Improvement
> Components: Scripting
> Reporter: Robert Munteanu
> Priority: Major
> Fix For: Scripting JSP Taglib 2.3.2
>
> Time Spent: 2h
> Remaining Estimate: 0h
>
> Since we now have an XSS API in Sling we should use this instead of embedding
> the ESAPI jars, since:
> - bundle size will be reduced
> - possibility to embed an out-of-date version is removed
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
