dev  

Messages by Thread

• • Re: [PR] SLING-13366 don't log un-escaped input [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13366 don't log un-escaped input [sling-org-apache-sling-engine] via GitHub
• [jira] [Created] (SLING-13366) ParameterSupport: Don't log CR/LF characters Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13365) when the too many parameters are provided,fail the request Joerg Hoh (Jira)
• [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-resource] via GitHub
  • Re: [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-resource] via GitHub
  • Re: [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-resource] via GitHub
• [PR] SLING-13365 fail by default when providing more than 10'000 parameters [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13365 fail by default when providing more than 10'000 parameters [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13365 fail by default when providing more than 10'000 parameters [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13365 fail by default when providing more than 10'000 parameters [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13365 fail by default when providing more than 10'000 parameters [sling-org-apache-sling-engine] via GitHub
• [jira] [Updated] (SLING-13365) when the too many parameters are provided,fail the request Joerg Hoh (Jira)
• [jira] [Created] (SLING-13365) when the too many parameters are provided,fail the request Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing Joerg Hoh (Jira)
• [PR] SLING-13364 if the parameter parsing fails throw a statuscode 400 [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13364 if the parameter parsing fails throw a statuscode 400 [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13364 if the parameter parsing fails throw a statuscode 400 [sling-org-apache-sling-engine] via GitHub
• [jira] [Created] (SLING-13363) Open-redirect hardening gaps in post-login redirect  parameter handling (Sling OAuth Client) — defense-in-depth Nicola Scendoni (Jira)
• [jira] [Resolved] (SLING-13362) Fix parameter parsing Joerg Hoh (Jira)
• [jira] [Created] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing Joerg Hoh (Jira)
• [jira] [Commented] (SLING-13363) Open-redirect hardening gaps in post-login redirect  parameter handling (Sling OAuth Client) — defense-in-depth Nicola Scendoni (Jira)
• [jira] [Resolved] (SLING-13357) Implement header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID Joerg Hoh (Jira)
• [jira] [Created] (SLING-13362) Fix parameter parsing Joerg Hoh (Jira)
• [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
• [jira] [Resolved] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13360) all log directives should handle CR/LF escaping Joerg Hoh (Jira)
• [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
• [jira] [Created] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter Joerg Hoh (Jira)
• [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
• [jira] [Assigned] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID Joerg Hoh (Jira)
• [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• [jira] [Created] (SLING-13360) all log directives should handle CR/LF escaping Joerg Hoh (Jira)
• [jira] [Created] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13358) Include warnings/protection cannot be changed on runtime Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13358) Include warnings/protection cannot be changed on runtime Joerg Hoh (Jira)
• [PR] SLING-13358 include protections should be re-configurable" [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13358 include protections should be re-configurable [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13358 include protections should be re-configurable [sling-org-apache-sling-engine] via GitHub
• [jira] [Created] (SLING-13358) Include warnings/protection cannot be changed on runtime Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• [jira] [Updated] (SLING-13357) Implement header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13357) Implement header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• [jira] [Created] (SLING-13357) Improve header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13343) Missing escaping in EncryptWebConsolePlugin Konrad Windszus (Jira)
• [jira] [Resolved] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2567 is BROKEN Apache Jenkins Server
  • [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2568 is FIXED Apache Jenkins Server
• [jira] [Created] (SLING-13356) ResourceDistributionPackageCleanup deletes all disposable packages in a single unbounded JCR commit Christian Schneider (Jira)
• [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
  • Re: [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
  • Re: [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
  • Re: [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
• [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.xss to v2.4.12 [sling-org-apache-sling-starter] via GitHub
  • Re: [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.xss to v2.4.12 [sling-org-apache-sling-starter] via GitHub
• [jira] [Closed] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• [jira] [Updated] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• [jira] [Resolved] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• [jira] [Closed] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• [jira] [Created] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13346) Downgrade slf4j dependency to 1.7 Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• [RESULT] [VOTE] Release Apache Sling XSS Protection API 2.4.12 Joerg Hoh
• [jira] [Closed] (SLING-13313) Improve javascript scheme detection in XSSAPI.getValidHref() Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• [jira] [Closed] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13331) Build with Tycho 5.x Robert Munteanu (Jira)
• [jira] [Resolved] (SLING-13332) Set build qualifiers based on git HEAD commit for nightly builds Robert Munteanu (Jira)
• [jira] [Resolved] (SLING-13330) FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path Robert Munteanu (Jira)
• [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
  • Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
• [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
  • [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
  • [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
  • [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Angela Schreiber (Jira)
  • [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Andrei Dulvac (Jira)
• [jira] [Created] (SLING-13354) StreamRenderer: Fix content-type when rendering an index file Joerg Hoh (Jira)
• [jira] [Created] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2562 is BROKEN Apache Jenkins Server
  • [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2563 is FIXED Apache Jenkins Server
• [jira] [Created] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• [jira] [Assigned] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• [jira] [Created] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
• [jira] [Created] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
  • Re: [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
• [jira] [Assigned] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include Carsten Ziegeler (Jira)
  • [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include Carsten Ziegeler (Jira)
• [jira] [Resolved] (SLING-13345) Improve logging for response header changing requests Joerg Hoh (Jira)
• [jira] [Created] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• [jira] [Commented] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Konrad Windszus (Jira)
• [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
  • Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
  • Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
  • Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
  • Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
  • Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
  • Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• [jira] [Created] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• [jira] [Commented] (SLING-13337) Switch testing to use Johnzon Stefan Seifert (Jira)
  • [jira] [Commented] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• [jira] [Created] (SLING-13348) Committer CLI should have a version command Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13348) Committer CLI should have a version command Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2560 is BROKEN Apache Jenkins Server
  • [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2561 is FIXED Apache Jenkins Server
• [PR] chore(deps): update dependency java-jdk to v17.0.20+101 [sling-org-apache-sling-starter] via GitHub
  • Re: [PR] chore(deps): update dependency java-jdk to v17.0.20+101 - autoclosed [sling-org-apache-sling-starter] via GitHub
• [jira] [Created] (SLING-13346) Downgrad slf4j dependency to 1.x Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13346) Downgrade slf4j dependency to 1.7 Konrad Windszus (Jira)
• [jira] [Resolved] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• [VOTE] Release Apache Sling XSS Protection API 2.4.12 Joerg Hoh
  • Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Jörg Hoh
  • Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Robert Munteanu
  • Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Konrad Windszus
  • RE: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Stefan Seifert
  • Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Jörg Hoh
  • Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Eric Norman
  • Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Carsten Ziegeler
• [jira] [Resolved] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• [jira] [Resolved] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
  • Re: [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
  • Re: [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
• [jira] [Resolved] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• [jira] [Assigned] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
  • [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)

• Earlier messages
• Later messages