Hi, On Fri, Aug 21, 2015 at 3:13 AM, Steven Walters <[email protected]> wrote: > ...Is there any additional detail as to why SLING-2512 is a bug exactly, in > that it is classified as "should not be allowed"?...
I had another look and the functionality that SLING-2512 disables could in certain cases allow arbitrary files to be imported in the repository, which we don't want of course. So it's correct for this to be disabled now, if you need it in your environment I see two ways a) Implement your own variant of that :import operation b) Use a post-processor that imports the files - you might import only their names/URLs from the XML and write an observation-triggered processor that validates their names/locations and if valid imports them. -Bertrand
