svn commit: r1833010 - /jackrabbit/oak/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/user/UserAuthentication.java

2018-06-06 Thread stillalex
Author: stillalex Date: Wed Jun 6 11:20:14 2018 New Revision: 1833010 URL: http://svn.apache.org/viewvc?rev=1833010=rev Log: OAK-7506 Prevent user enumeration by exploiting time delay vulnerability Modified:

svn commit: r1832984 - /jackrabbit/oak/trunk/oak-core/src/main/resources/org/apache/jackrabbit/oak/builtin_nodetypes.cnd

2018-06-06 Thread stillalex
Author: stillalex Date: Wed Jun 6 06:44:00 2018 New Revision: 1832984 URL: http://svn.apache.org/viewvc?rev=1832984=rev Log: OAK-7527 Drop mandatory constraint on "rep:system" node for "rep:privileges" Modified: