[jira] [Resolved] (SLING-5956) Move Oak ITs from org.apache.sling.jcr.repository.it-jackrabbit-oak into org.apache.sling.jcr.oak.server

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5956?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz resolved SLING-5956. - Resolution: Done ITs merged in [r1756148|https://svn.apache.org/r1756148] from

[jira] [Resolved] (SLING-5809) Provide Sling's Karaf Features as Options for Pax Exam

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5809?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz resolved SLING-5809. - Resolution: Done > Provide Sling's Karaf Features as Options for Pax Exam >

[jira] [Resolved] (SLING-5955) Refactor configuration of OakSlingRepositoryManager

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5955?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz resolved SLING-5955. - Resolution: Done [r1756143|https://svn.apache.org/r1756143] > Refactor configuration of

[jira] [Resolved] (SLING-5959) Update Oak to 1.5.7

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz resolved SLING-5959. - Resolution: Done [r1756210|https://svn.apache.org/r1756210]

[jira] [Resolved] (SLING-5958) Upgrade Jackrabbit to 2.13.1

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5958?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz resolved SLING-5958. - Resolution: Done > Upgrade Jackrabbit to 2.13.1 > > >

[jira] [Reopened] (SLING-5958) Upgrade Jackrabbit to 2.13.1

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5958?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz reopened SLING-5958: - > Upgrade Jackrabbit to 2.13.1 > > > Key: SLING-5958 >

[jira] [Resolved] (SLING-5958) Upgrade Jackrabbit to 2.13.1

2016-08-12 Thread Oliver Lietz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5958?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oliver Lietz resolved SLING-5958. - Resolution: Fixed [r1756203|https://svn.apache.org/r1756203]

[jira] [Created] (SLING-5959) Update Oak to 1.5.7

2016-08-12 Thread Oliver Lietz (JIRA)
Oliver Lietz created SLING-5959: --- Summary: Update Oak to 1.5.7 Key: SLING-5959 URL: https://issues.apache.org/jira/browse/SLING-5959 Project: Sling Issue Type: Task Components: JCR,

[jira] [Created] (SLING-5958) Upgrade Jackrabbit to 2.13.1

2016-08-12 Thread Oliver Lietz (JIRA)
Oliver Lietz created SLING-5958: --- Summary: Upgrade Jackrabbit to 2.13.1 Key: SLING-5958 URL: https://issues.apache.org/jira/browse/SLING-5958 Project: Sling Issue Type: Task

[jira] [Comment Edited] (SLING-5792) API to manage Authentication Requirement

2016-08-12 Thread angela (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418949#comment-15418949 ] angela edited comment on SLING-5792 at 8/12/16 2:54 PM: [~cziegeler], In this case

[jira] [Comment Edited] (SLING-5792) API to manage Authentication Requirement

2016-08-12 Thread angela (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418949#comment-15418949 ] angela edited comment on SLING-5792 at 8/12/16 2:54 PM: [~cziegeler], In this case

[jira] [Commented] (SLING-5792) API to manage Authentication Requirement

2016-08-12 Thread angela (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418949#comment-15418949 ] angela commented on SLING-5792: --- [~cziegeler], In this case I might have missed on how to do this

[jira] [Commented] (SLING-5792) API to manage Authentication Requirement

2016-08-12 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418892#comment-15418892 ] Carsten Ziegeler commented on SLING-5792: - [~anchela] Thanks for the update. I've now looked in

Re: [VOTE] Release Apache Sling Security 1.1.0

2016-08-12 Thread Carsten Ziegeler
+1 -- Carsten Ziegeler Adobe Research Switzerland cziege...@apache.org

[jira] [Updated] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu updated SLING-5948: --- Labels: Sling-9-ReleaseNotes (was: ) > Support Streaming uploads. >

[VOTE] Release Apache Sling Security 1.1.0

2016-08-12 Thread Carsten Ziegeler
Hi, We solved 1 issues in this release: https://issues.apache.org/jira/browse/SLING-5942 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1501 You can use this UNIX script to download the release and verify the signatures:

[jira] [Created] (SLING-5957) SlingPostServlet: susceptible CSRF with empty content-type

2016-08-12 Thread JIRA
Dominique Jäggi created SLING-5957: -- Summary: SlingPostServlet: susceptible CSRF with empty content-type Key: SLING-5957 URL: https://issues.apache.org/jira/browse/SLING-5957 Project: Sling

[jira] [Resolved] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ian Boston resolved SLING-5948. --- Resolution: Fixed Fix Version/s: Engine 2.5.2 Servlets Post 2.3.14 Fixed in

[jira] [Commented] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418729#comment-15418729 ] Ian Boston commented on SLING-5948: --- JDK8 builds passed. JDK7 builds failed at launchpad, as it requires

[jira] [Commented] (SLING-5942) Use http whiteboard for filter registration

2016-08-12 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5942?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418711#comment-15418711 ] Carsten Ziegeler commented on SLING-5942: - Updated the filter to be applied to all contexts in

[jira] [Created] (SLING-5956) Move Oak ITs from org.apache.sling.jcr.repository.it-jackrabbit-oak into org.apache.sling.jcr.oak.server

2016-08-12 Thread Oliver Lietz (JIRA)
Oliver Lietz created SLING-5956: --- Summary: Move Oak ITs from org.apache.sling.jcr.repository.it-jackrabbit-oak into org.apache.sling.jcr.oak.server Key: SLING-5956 URL:

[jira] [Created] (SLING-5955) Refactor configuration of OakSlingRepositoryManager

2016-08-12 Thread Oliver Lietz (JIRA)
Oliver Lietz created SLING-5955: --- Summary: Refactor configuration of OakSlingRepositoryManager Key: SLING-5955 URL: https://issues.apache.org/jira/browse/SLING-5955 Project: Sling Issue Type:

[jira] [Commented] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418645#comment-15418645 ] ASF GitHub Bot commented on SLING-5948: --- GitHub user ieb opened a pull request:

[GitHub] sling pull request #161: SLING-5948 Support Streaming.

2016-08-12 Thread ieb
GitHub user ieb opened a pull request: https://github.com/apache/sling/pull/161 SLING-5948 Support Streaming. Creating pull request to trigger builds by CI and Travis. See issue for details. Will commit to SVN if all ok. You can merge this pull request into a Git repository by

[jira] [Commented] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418641#comment-15418641 ] Ian Boston commented on SLING-5948: --- Patch in Git has been updated with comments so far and some

[VOTE CANCELLED] Release Apache Sling XSS Protection Bundle version 1.0.10

2016-08-12 Thread Robert Munteanu
Vote is cancelled since release 1.0.12 is already under vote. I will remove the release tags and drop the staging repository from Nexus. Thanks, Robert

Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.10

2016-08-12 Thread Robert Munteanu
On Fri, 2016-08-12 at 10:25 +0200, Bertrand Delacretaz wrote: > I just started the vote for 1.0.12 including another small fix - we > should have waited for that but I noticed it too late, sorry about > that. Hm, I managed to wait too long with 1.0.10, and if 1.0.12 is already under vote I'll

Re: Pull Request for SLING-5792, SLING-5795, SLING-5868

2016-08-12 Thread Angela Schreiber
Hi Sling-Devs The pull request has been updated incorporating initial feedback from Carsten. I would appreciate if the Sling team could follow up on this. Thanks and kind regards Angela On 09/08/16 10:09, "Angela Schreiber" wrote: >Hi Sling-Devs > >On July 19th I opened a

Re: [VOTE] Release Sling Hypermedia API client-side tools 1.0.0

2016-08-12 Thread Andrei Dulvac
Done. On Fri, Aug 12, 2016 at 10:36 AM Carsten Ziegeler wrote: > Hi Andrei, > > as this is a new vote, I think it makes sense to start a new vote > thread, something like "[VOTE] Release Sling Hypermedia API client-side > tools 1.0.0, take two", so we can clearly

[VOTE] Release Sling Hypermedia API client-side tools 1.0.0 - take TWO

2016-08-12 Thread Andrei Dulvac
Hi, We solved 3 issues for this initial release:https://issues.apache.org/jira/browse/SLING/fixforversion/12337959 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1499/ You can use this UNIX script to download the release and verify the

Re: [VOTE] Release Apache Sling XSS Protection Bundle 1.0.12

2016-08-12 Thread Ian Boston
+1, all signatures check out. Ian On 12 August 2016 at 09:35, Carsten Ziegeler wrote: > +1 > > > > -- > Carsten Ziegeler > Adobe Research Switzerland > cziege...@apache.org > >

Re: [VOTE] Release Sling Hypermedia API client-side tools 1.0.0

2016-08-12 Thread Carsten Ziegeler
Hi Andrei, as this is a new vote, I think it makes sense to start a new vote thread, something like "[VOTE] Release Sling Hypermedia API client-side tools 1.0.0, take two", so we can clearly distinguish between the first attempt and the new one. Thanks Carsten > Anyone, please? > > On Wed, Aug

Re: [VOTE] Release Apache Sling XSS Protection Bundle 1.0.12

2016-08-12 Thread Carsten Ziegeler
+1 -- Carsten Ziegeler Adobe Research Switzerland cziege...@apache.org

Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.10

2016-08-12 Thread Bertrand Delacretaz
Hi, On Thu, Aug 4, 2016 at 11:04 AM, Robert Munteanu wrote: > ...We solved 2 issues in this release: > https://issues.apache.org/jira/browse/SLING/fixforversion/12334729 .. I just started the vote for 1.0.12 including another small fix - we should have waited for that but I

[VOTE] Release Apache Sling XSS Protection Bundle 1.0.12

2016-08-12 Thread Bertrand Delacretaz
Hi, The vote is still ongoing for V1.0.10 of the same module, but we should have waited for another small fix that's included in this release. No big deal. We solved 1 issue in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12338062 Staging repository:

[jira] [Updated] (SLING-5234) Remove getAdministrativeResourceResolver() usage from org.apache.sling.xss

2016-08-12 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5234?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bertrand Delacretaz updated SLING-5234: --- Fix Version/s: (was: XSS Protection API 1.0.12) > Remove

[jira] [Updated] (SLING-4293) [XSS] Reduce footprint and dependencies

2016-08-12 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-4293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bertrand Delacretaz updated SLING-4293: --- Fix Version/s: (was: XSS Protection API 1.0.12) > [XSS] Reduce footprint and

[jira] [Updated] (SLING-4560) XSSAPI#getValidHref is empty for valid Bengali or Hindi characters

2016-08-12 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-4560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bertrand Delacretaz updated SLING-4560: --- Fix Version/s: (was: XSS Protection API 1.0.12) > XSSAPI#getValidHref is empty

[jira] [Updated] (SLING-4273) Check list of required imports

2016-08-12 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-4273?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bertrand Delacretaz updated SLING-4273: --- Fix Version/s: (was: XSS Protection API 1.0.12) > Check list of required imports

[jira] [Updated] (SLING-4365) Streamline ESAPI configuration

2016-08-12 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-4365?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bertrand Delacretaz updated SLING-4365: --- Fix Version/s: (was: XSS Protection API 1.0.12) > Streamline ESAPI configuration

[jira] [Commented] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread Ian Boston (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418449#comment-15418449 ] Ian Boston commented on SLING-5948: --- Agreed, thank you for the rfc reference. Header is now

[jira] [Commented] (SLING-5948) Support Streaming uploads.

2016-08-12 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5948?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418432#comment-15418432 ] Robert Munteanu commented on SLING-5948: I suggest dropping the 'X-' prefix, see