[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13494175#comment-13494175 ] Carsten Ziegeler commented on SLING-2320: - I've applied a slightly modified patch

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13494032#comment-13494032 ] Carsten Ziegeler commented on SLING-2320: - I've attached a different patch which s

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13494013#comment-13494013 ] Carsten Ziegeler commented on SLING-2320: - Looking at the current code, it creates

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13493968#comment-13493968 ] Carsten Ziegeler commented on SLING-2320: - I'm not sure if we should fetch the who

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13493850#comment-13493850 ] Carsten Ziegeler commented on SLING-2320: - [~fmeschbe] Could you please have a loo

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13289232#comment-13289232 ] Jeff Young commented on SLING-2320: --- The 12/Dec/11 patch still needs to be applied. Wit

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13197723#comment-13197723 ] Jeff Young commented on SLING-2320: --- My last patch (which contains all the good bug fixe

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13197652#comment-13197652 ] Carsten Ziegeler commented on SLING-2320: - Is this issue solved or what needs to b

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13167650#comment-13167650 ] Jeff Young commented on SLING-2320: --- BTW: final installment is "json_get_servlet_rewrite

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13167591#comment-13167591 ] Justin Edelson commented on SLING-2320: --- adding unit tests patch in r1213305. Jeff

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13167590#comment-13167590 ] Justin Edelson commented on SLING-2320: --- level fix done in r1213304

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165109#comment-13165109 ] Carsten Ziegeler commented on SLING-2320: - The patch looks good to me - for the de

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13163970#comment-13163970 ] Jeff Young commented on SLING-2320: --- Felix, your change to the logic turns off the DOS l

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13163418#comment-13163418 ] Felix Meschberger commented on SLING-2320: -- Actually, if I read the patch correct

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13163102#comment-13163102 ] Felix Meschberger commented on SLING-2320: -- Update: the other issues should be ha

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13163081#comment-13163081 ] Felix Meschberger commented on SLING-2320: -- I think these are bad bugs to be fixe

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13163073#comment-13163073 ] Jeff Young commented on SLING-2320: --- Yeah, I was also somewhat concerned by the fact tha

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13163062#comment-13163062 ] Felix Meschberger commented on SLING-2320: -- Thanks for providing the patch which

[jira] [Commented] (SLING-2320) Current DOS-prevention for infinity.json can prevent enumeration of children

[ https://issues.apache.org/jira/browse/SLING-2320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13162978#comment-13162978 ] Jeff Young commented on SLING-2320: --- Note: the patch has SLING- in it because I thou