You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [PR] SLING-13322 warnings on non-spec compliant behavior [sling-org-apache-sling-engine] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/01 07:02:10 UTC, 4 replies.
- Re: [PR] SLING-13324 Relative JS Use dependencies are not resolved via sling:resourceSuperType when the component is overlaid under a higher-priority search path (e.g. /apps over /libs) [sling-org-apache-sling-scripting-sightly-js-provider] - posted by "raducotescu (via GitHub)" <gi...@apache.org> on 2026/09/01 12:37:04 UTC, 1 replies.
- [jira] [Updated] (SLING-13324) Relative JS Use dependencies are not resolved via sling:resourceSuperType when the component is overlaid under a higher-priority search path (e.g. /apps over /libs) - posted by "Radu Cotescu (Jira)" <ji...@apache.org> on 2026/09/01 12:38:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13324) Relative JS Use dependencies are not resolved via sling:resourceSuperType when the component is overlaid under a higher-priority search path (e.g. /apps over /libs) - posted by "Radu Cotescu (Jira)" <ji...@apache.org> on 2026/09/01 12:50:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13324) Relative JS Use dependencies are not resolved via sling:resourceSuperType when the component is overlaid under a higher-priority search path (e.g. /apps over /libs) - posted by "Radu Cotescu (Jira)" <ji...@apache.org> on 2026/09/01 12:50:00 UTC, 0 replies.
- [VOTE] Release Apache Sling Scripting HTL JS Use Provider 1.2.16 - posted by Radu Cotescu <ra...@apache.org> on 2026/09/01 12:55:02 UTC, 3 replies.
- Re: [PR] Bump org.apache.commons:commons-lang3 from 3.5 to 3.18.0 [sling-org-apache-sling-scripting-sightly-js-provider] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 18:33:04 UTC, 0 replies.
- [jira] [Resolved] (SLING-13322) header-modifying calls should warn on include - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/01 18:54:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13322) header-modifying calls should warn on include - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/01 18:54:00 UTC, 0 replies.
- Re: [PR] SLING-13202 Remove dependency on commons-fileupload [sling-org-apache-sling-engine] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 08:36:18 UTC, 1 replies.
- Re: [PR] SLING-13138 Add configurable fail-fast parameter limit handling [sling-org-apache-sling-engine] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 08:36:35 UTC, 2 replies.
- [jira] [Closed] (SLING-12958) sendError() should throw an exception if used during include - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/02 09:09:00 UTC, 0 replies.
- [jira] [Created] (SLING-13326) incorrect results from ResourceResolver.getParentResourceType() cache - posted by "Julian Sedding (Jira)" <ji...@apache.org> on 2026/09/02 10:06:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13326) incorrect results from ResourceResolver.getParentResourceType() cache - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/02 10:07:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13277) Backport to 1.x - Using a String instead of StandardCharset to instantiante strings requires a lock - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/02 11:49:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13276) Backport to 1.x - Prevent creating resources with a name only consisting of dots - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/02 11:49:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13274) Backport to 1.x - MapEntries: NPE in onChange when a resource change is delivered during construction or disposal - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/02 11:49:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13275) Backport to 1.x - cache results of ResourceResolver.getResourceParentType - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/02 11:49:00 UTC, 0 replies.
- [jira] [Created] (SLING-13327) Resource Resolver: add metrics related to observation events related to vanity paths and aliases - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/02 13:04:00 UTC, 0 replies.
- [PR] SLING-13322 fix typos [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/02 17:26:53 UTC, 2 replies.
- [jira] [Resolved] (SLING-13138) Add configurable fail-fast behavior for request parameter limit handling - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/02 17:36:00 UTC, 0 replies.
- [jira] [Commented] (SLING-13138) Add configurable fail-fast behavior for request parameter limit handling - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/02 17:37:00 UTC, 0 replies.
- [PR] SLING-13327: add metrics related to observation events related to vanity paths and aliases [sling-org-apache-sling-resourceresolver] - posted by "reschke (via GitHub)" <gi...@apache.org> on 2026/09/03 12:08:33 UTC, 9 replies.
- RE: Re: A home for RFC 9651 (Structured Field Values) in Sling? - posted by Julian Reschke <re...@apache.org> on 2026/09/03 12:39:23 UTC, 1 replies.
- [jira] [Commented] (SLING-13327) Resource Resolver: add metrics related to observation events related to vanity paths and aliases - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/03 14:58:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13327) Resource Resolver: add metrics related to observation events related to vanity paths and aliases - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/04 08:34:00 UTC, 0 replies.
- Re: [PR] SLING-13323: when paging encounters unexpected values, log the position inside the page as well [sling-org-apache-sling-resourceresolver] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 19:47:13 UTC, 1 replies.
- [jira] [Created] (SLING-13328) Update dependencies - posted by "Ramon Bisswanger (Jira)" <ji...@apache.org> on 2026/09/06 16:02:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13328) Update dependencies - posted by "Ramon Bisswanger (Jira)" <ji...@apache.org> on 2026/09/06 16:03:00 UTC, 1 replies.
- [PR] SLING-13328: Update dependencies [sling-org-apache-sling-testing-clients] - posted by "bisswanger (via GitHub)" <gi...@apache.org> on 2026/09/06 16:04:28 UTC, 5 replies.
- [jira] [Resolved] (SLING-13328) Update dependencies - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/07 12:08:00 UTC, 0 replies.
- [jira] [Created] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive - posted by "Aamir bhat (Jira)" <ji...@apache.org> on 2026/09/07 12:10:00 UTC, 0 replies.
- [VOTE] Release Apache Sling Testing Clients 3.1.2 - posted by Robert Munteanu <ro...@apache.org> on 2026/09/07 12:12:17 UTC, 2 replies.
- [jira] [Updated] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/07 12:29:00 UTC, 0 replies.
- [RESULT] [VOTE] Release Apache Sling Scripting HTL JS Use Provider 1.2.16 - posted by Radu Cotescu <ra...@apache.org> on 2026/09/07 12:33:58 UTC, 0 replies.
- [jira] [Commented] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/07 12:40:00 UTC, 3 replies.
- [jira] [Closed] (SLING-13324) Relative JS Use dependencies are not resolved via sling:resourceSuperType when the component is overlaid under a higher-priority search path (e.g. /apps over /libs) - posted by "Radu Cotescu (Jira)" <ji...@apache.org> on 2026/09/07 12:44:00 UTC, 0 replies.
- [jira] [Closed] (SLING-12638) Upgrade to parent pom 52 - posted by "Radu Cotescu (Jira)" <ji...@apache.org> on 2026/09/07 12:44:00 UTC, 0 replies.
- [jira] [Commented] (SLING-12879) ResourceResolver: add option to run alias initializer in background - posted by "Jan Stettler (Jira)" <ji...@apache.org> on 2026/09/08 06:14:00 UTC, 19 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2547 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/08 11:26:07 UTC, 0 replies.
- [jira] [Updated] (SLING-12879) ResourceResolver: add option to run alias initializer in background - posted by "Jan Stettler (Jira)" <ji...@apache.org> on 2026/09/08 11:35:00 UTC, 3 replies.
- [jira] [Comment Edited] (SLING-12879) ResourceResolver: add option to run alias initializer in background - posted by "Jan Stettler (Jira)" <ji...@apache.org> on 2026/09/08 12:02:00 UTC, 6 replies.
- [jira] [Created] (SLING-13330) FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/08 15:31:00 UTC, 0 replies.
- [PR] SLING-13330 - FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path [sling-ide-tooling] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/08 16:00:54 UTC, 1 replies.
- Re: [PR] Update Node.js to v24.21.0 [sling-site] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/09 07:43:32 UTC, 0 replies.
- Re: [PR] chore(deps): update dependency org.javassist:javassist to v3.33.0-ga [sling-org-apache-sling-starter] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/09 07:43:58 UTC, 0 replies.
- [PR] chore(deps): update dependency org.apache.felix:org.apache.felix.http.jetty12 to v2.0.6 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/09 07:48:49 UTC, 1 replies.
- [PR] chore(deps): update dependency org.slf4j:slf4j-api to v2.0.19 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/09 07:48:56 UTC, 1 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2548 is FIXED - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/09 08:00:58 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2549 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/09 09:48:57 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2550 is FIXED - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/09 11:32:49 UTC, 0 replies.
- [jira] [Created] (SLING-13331) Build with Tycho 5.x - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/09 11:44:00 UTC, 0 replies.
- [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/09 11:47:21 UTC, 7 replies.
- [PR] SLING-13332 - Set build qualifiers based on git HEAD commit for nightly builds [sling-ide-tooling] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/09 12:42:56 UTC, 1 replies.
- [jira] [Created] (SLING-13332) Set build qualifiers based on git HEAD commit for nightly builds - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/09 12:43:00 UTC, 0 replies.
- [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.scripting.sightly.js.provider to v1.2.16 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/09 13:44:05 UTC, 1 replies.
- [PR] SLING-13331 - Debug build with Java 21 [sling-ide-tooling] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/09 14:14:25 UTC, 2 replies.
- Re: [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.servlets.resolver to v3.0.10 [sling-org-apache-sling-starter] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/09 16:37:25 UTC, 0 replies.
- Re: [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.jcr.davex to v1.3.14 [sling-org-apache-sling-starter] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/09 16:37:43 UTC, 0 replies.
- [PR] chore(deps): update dependency com.h2database:h2-mvstore to v2.5.250 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/09 16:38:29 UTC, 1 replies.
- [PR] chore(deps): update mongodb java driver to v5.5.2 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/09 16:38:35 UTC, 0 replies.
- [PR] chore(deps): update mongodb java driver to v5.6.5 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/10 01:13:50 UTC, 0 replies.
- [jira] [Created] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 09:35:00 UTC, 0 replies.
- [jira] [Created] (SLING-13334) Fix input validation gaps - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 09:38:00 UTC, 0 replies.
- [jira] [Created] (SLING-13335) Insufficient output encoding in Webconsole plugin - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 12:50:00 UTC, 0 replies.
- [jira] [Created] (SLING-13336) Missing resource limits in XML/JSON validation - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 12:52:00 UTC, 0 replies.
- [jira] [Created] (SLING-13337) Switch testing to use Johnzon - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 12:54:00 UTC, 0 replies.
- [jira] [Created] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 12:57:00 UTC, 0 replies.
- [jira] [Created] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/11 12:58:00 UTC, 0 replies.
- [PR] Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2 [sling-site] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/11 22:49:57 UTC, 0 replies.
- [jira] [Commented] (SLING-13280) Provide a CryptoService implementation just relying on JCA - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 09:47:00 UTC, 1 replies.
- [jira] [Resolved] (SLING-13280) Provide a CryptoService implementation just relying on JCA - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 09:48:00 UTC, 0 replies.
- Re: [PR] Do no longer preferably use the first Provider exposed via OSGi service [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/13 09:53:59 UTC, 0 replies.
- [jira] [Assigned] (SLING-13340) Do no longer use java.security.Provider OSGi service in JasyptStandardPbeStringCryptoService - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 09:54:00 UTC, 0 replies.
- [jira] [Created] (SLING-13340) Do no longer use java.security.Provider OSGi service in JasyptStandardPbeStringCryptoService - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 09:54:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13340) Do no longer use java.security.Provider OSGi service in JasyptStandardPbeStringCryptoService - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 09:55:00 UTC, 0 replies.
- [jira] [Comment Edited] (SLING-13280) Provide a CryptoService implementation just relying on JCA - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:08:00 UTC, 1 replies.
- [jira] [Assigned] (SLING-13341) Use salt length of 16 byte (128 bit) by default - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:17:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13341) Use salt length of 16 byte (128 bit) by default - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:17:00 UTC, 1 replies.
- [jira] [Created] (SLING-13341) Use salt length of 16 byte (128 bit) by default - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:17:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13341) Use salt length of 16 byte (128 bit) by default - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:19:00 UTC, 0 replies.
- Re: [PR] SLING-13318 Deprecate Jasypt implementation [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/13 10:19:09 UTC, 0 replies.
- [jira] [Resolved] (SLING-13318) Deprecate Jasypt based crypto implementation - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:20:00 UTC, 0 replies.
- [jira] [Created] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:36:00 UTC, 0 replies.
- Re: [PR] SLING-13279 Update web console plugin category from 'Crypto' to 'Sling' [sling-org-apache-sling-commons-crypto] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/13 10:40:38 UTC, 1 replies.
- [jira] [Updated] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:41:00 UTC, 1 replies.
- [jira] [Resolved] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:47:00 UTC, 0 replies.
- Re: [PR] SLING-13282 Add encrypted flag to PropertyMetadata [sling-org-apache-sling-caconfig-spi] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/13 10:47:32 UTC, 1 replies.
- [jira] [Resolved] (SLING-13279) Commons Crypto Web Console should reuse category "Sling" - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:49:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13343) Missing escaping in - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:50:00 UTC, 2 replies.
- [jira] [Created] (SLING-13343) Missing HTML - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:50:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13343) Missing escaping in EncryptWebConsolePlugin - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:51:00 UTC, 1 replies.
- [PR] SLING-13343 Escape dynamic values in Web Console pluginn [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/13 10:56:55 UTC, 0 replies.
- [jira] [Assigned] (SLING-13343) Missing escaping in EncryptWebConsolePlugin - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 10:57:00 UTC, 0 replies.
- Re: [PR] SLING-13343 Escape dynamic values in Web Console plugin [sling-org-apache-sling-commons-crypto] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/13 11:03:51 UTC, 2 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2558 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/13 11:25:45 UTC, 0 replies.
- [PR] SLING-13280 Allow deferring registration of crypto service until a given [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/13 15:24:22 UTC, 3 replies.
- [PR] Remove quotes from OSGi config names [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/13 17:15:25 UTC, 2 replies.
- Re: [PR] SLING-13282 Add encrypted element to Property annotation [sling-org-apache-sling-caconfig-api] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/13 18:19:23 UTC, 0 replies.
- [jira] [Created] (SLING-13344) Provide PasswordProvider based on OSGi configuration properties - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 18:30:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13344) Provide PasswordProvider based on OSGi configuration properties - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/13 18:50:00 UTC, 0 replies.
- [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/13 18:50:06 UTC, 10 replies.
- [jira] [Commented] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/14 10:43:00 UTC, 0 replies.
- [jira] [Comment Edited] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/14 10:47:00 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2559 is FIXED - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/14 11:35:16 UTC, 0 replies.
- [jira] [Created] (SLING-13345) Improve logging for response header changing requests - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 14:23:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13345) Improve logging for response header changing requests - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 14:23:00 UTC, 0 replies.
- [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/14 14:31:11 UTC, 3 replies.
- [jira] [Assigned] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 15:18:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13334) Fix input validation gaps - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 15:34:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13335) Insufficient output encoding in Webconsole plugin - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 15:57:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13336) Missing resource limits in XML/JSON validation - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:09:00 UTC, 2 replies.
- [jira] [Assigned] (SLING-13336) Missing resource limits in XML/JSON validation - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:16:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13337) Switch testing to use Johnzon - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:16:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:26:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:26:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:27:00 UTC, 1 replies.
- [jira] [Updated] (SLING-13334) Fix input validation gaps - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:27:00 UTC, 1 replies.
- [jira] [Updated] (SLING-13335) Insufficient output encoding in Webconsole plugin - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:27:00 UTC, 2 replies.
- [jira] [Updated] (SLING-13337) Switch testing to use Johnzon - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:28:00 UTC, 2 replies.
- [jira] [Updated] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:28:00 UTC, 2 replies.
- [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 16:28:00 UTC, 2 replies.
- Re: [PR] SLING-13329 : Distribution Queue UI Solution Approach [sling-org-apache-sling-distribution-core] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/15 07:34:09 UTC, 2 replies.
- [jira] [Created] (SLING-13346) Downgrad slf4j dependency to 1.x - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 07:43:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13346) Downgrad slf4j dependency to 1.7 - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 07:46:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13346) Downgrad slf4j dependency to 1.7 - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 07:46:00 UTC, 0 replies.
- [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/15 07:46:06 UTC, 2 replies.
- [jira] [Resolved] (SLING-13334) Fix input validation gaps - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:12:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:12:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13335) Insufficient output encoding in Webconsole plugin - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:13:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13346) Downgrad slf4j dependency to 1.7 - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:13:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:13:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13337) Switch testing to use Johnzon - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:13:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13336) Missing resource limits in XML/JSON validation - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:13:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 08:13:00 UTC, 0 replies.
- [VOTE] Release Apache Sling XSS Protection API 2.4.12 - posted by Joerg Hoh <jo...@apache.org> on 2026/09/15 08:42:26 UTC, 7 replies.
- [jira] [Updated] (SLING-13346) Downgrade slf4j dependency to 1.7 - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/15 09:37:00 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2560 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/15 11:19:01 UTC, 0 replies.
- Re: [PR] chore(deps): update mongo-java-driver monorepo to v5.6.1 - abandoned [sling-org-apache-sling-starter] - posted by "rombert (via GitHub)" <gi...@apache.org> on 2026/09/15 11:26:46 UTC, 0 replies.
- [PR] chore(deps): update dependency java-jdk to v17.0.20+101 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/15 11:28:22 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2561 is FIXED - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/15 11:44:54 UTC, 0 replies.
- [jira] [Created] (SLING-13347) Committer CLI: improve handling of github ratelimiting - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 11:46:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13347) Committer CLI: improve handling of github ratelimiting - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 11:49:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13347) Committer CLI: improve handling of github ratelimiting - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 11:52:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13348) Committer CLI should have a version command - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 11:52:00 UTC, 0 replies.
- [jira] [Created] (SLING-13348) Committer CLI should have a version command - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 11:52:00 UTC, 0 replies.
- [jira] [Commented] (SLING-13337) Switch testing to use Johnzon - posted by "Stefan Seifert (Jira)" <ji...@apache.org> on 2026/09/15 13:11:00 UTC, 1 replies.
- [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/15 15:04:46 UTC, 6 replies.
- [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/15 15:51:00 UTC, 2 replies.
- [jira] [Commented] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/15 15:53:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13349) response header modifying operations should throw an exception if used during include - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 07:39:00 UTC, 0 replies.
- [jira] [Created] (SLING-13349) response header modifying operations should throw an exception if used during include - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 07:39:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13349) response header modifying operations should throw an exception if used during include - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 07:40:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13345) Improve logging for response header changing requests - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 08:06:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include - posted by "Carsten Ziegeler (Jira)" <ji...@apache.org> on 2026/09/16 08:07:00 UTC, 1 replies.
- [jira] [Assigned] (SLING-13350) Second call of a header-modifying operations in include is successful - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 08:13:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13350) Second call of a header-modifying operations in include is successful - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 08:13:00 UTC, 0 replies.
- [jira] [Created] (SLING-13350) Second call of a header-modifying operations in include is successful - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 08:13:00 UTC, 0 replies.
- [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/16 08:20:21 UTC, 2 replies.
- [jira] [Assigned] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 08:32:00 UTC, 0 replies.
- [jira] [Created] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 08:32:00 UTC, 0 replies.
- [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/16 08:39:03 UTC, 2 replies.
- [jira] [Assigned] (SLING-13352) Implement header-modification validation for newer Servlet methods - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 09:13:00 UTC, 0 replies.
- [jira] [Created] (SLING-13352) Implement header-modification validation for newer Servlet methods - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/16 09:13:00 UTC, 0 replies.
- [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/16 09:45:34 UTC, 6 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2562 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/16 11:30:23 UTC, 0 replies.
- [jira] [Created] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails - posted by "Rishabh Daim (Jira)" <ji...@apache.org> on 2026/09/17 08:52:00 UTC, 0 replies.
- Re: [PR] SLING-13257: Improve Test Coverage [sling-org-apache-sling-auth-core] - posted by "apelluru (via GitHub)" <gi...@apache.org> on 2026/09/17 09:40:56 UTC, 0 replies.
- [jira] [Created] (SLING-13354) StreamRenderer: Fix content-type when rendering an index file - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/17 11:31:00 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2563 is FIXED - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/17 11:32:44 UTC, 0 replies.
- [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails - posted by "Rishabh Daim (Jira)" <ji...@apache.org> on 2026/09/17 11:46:00 UTC, 2 replies.
- [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] - posted by "rishabhdaim (via GitHub)" <gi...@apache.org> on 2026/09/17 11:49:27 UTC, 8 replies.
- [jira] [Commented] (SLING-13282) Support automatic decryption in Context-Aware Configurations - posted by "Stefan Seifert (Jira)" <ji...@apache.org> on 2026/09/17 12:12:00 UTC, 2 replies.
- [jira] [Resolved] (SLING-13331) Build with Tycho 5.x - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/17 12:39:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13330) FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/17 12:40:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13332) Set build qualifiers based on git HEAD commit for nightly builds - posted by "Robert Munteanu (Jira)" <ji...@apache.org> on 2026/09/17 12:45:00 UTC, 0 replies.
- Re: [PR] fix(auth): prevent open redirect and log injection in feedback handlers [sling-org-apache-sling-auth-core] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/18 06:42:44 UTC, 1 replies.
- [RESULT] [VOTE] Release Apache Sling XSS Protection API 2.4.12 - posted by Joerg Hoh <jo...@apache.org> on 2026/09/18 10:13:46 UTC, 0 replies.
- [jira] [Closed] (SLING-13335) Insufficient output encoding in Webconsole plugin - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13336) Missing resource limits in XML/JSON validation - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13313) Improve javascript scheme detection in XSSAPI.getValidHref() - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13346) Downgrade slf4j dependency to 1.7 - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13334) Fix input validation gaps - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 10:15:00 UTC, 0 replies.
- [jira] [Created] (SLING-13355) Make request error handlign aware of content-types - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 16:45:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/18 16:46:00 UTC, 2 replies.
- [jira] [Comment Edited] (SLING-13282) Support automatic decryption in Context-Aware Configurations - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/18 18:29:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter - posted by "Eric Norman (Jira)" <ji...@apache.org> on 2026/09/18 20:53:00 UTC, 0 replies.
- [jira] [Closed] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter - posted by "Eric Norman (Jira)" <ji...@apache.org> on 2026/09/18 20:54:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter - posted by "Eric Norman (Jira)" <ji...@apache.org> on 2026/09/18 20:54:00 UTC, 0 replies.
- [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.xss to v2.4.12 [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/20 04:12:02 UTC, 0 replies.
- Re: [PR] chore(deps): update dependency java-jdk to v17.0.20+101 - autoclosed [sling-org-apache-sling-starter] - posted by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/09/20 04:12:04 UTC, 0 replies.
- [jira] [Created] (SLING-13356) ResourceDistributionPackageCleanup deletes all disposable packages in a single unbounded JCR commit - posted by "Christian Schneider (Jira)" <ji...@apache.org> on 2026/09/20 12:33:00 UTC, 0 replies.
- [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] - posted by "cschneider (via GitHub)" <gi...@apache.org> on 2026/09/20 12:44:32 UTC, 3 replies.
- [jira] [Resolved] (SLING-13350) Second call of a header-modifying operations in include is successful - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/21 11:33:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/21 11:34:00 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2567 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/21 11:38:06 UTC, 0 replies.
- [jira] [Resolved] (SLING-13343) Missing escaping in EncryptWebConsolePlugin - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/21 15:47:00 UTC, 0 replies.
- [jira] [Created] (SLING-13357) Improve header-modification validation for setCharacterEncoding - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/21 16:04:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13357) Implement header-modification validation for setCharacterEncoding - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/21 16:47:00 UTC, 1 replies.
- [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/21 16:47:02 UTC, 9 replies.
- [jira] [Resolved] (SLING-13352) Implement header-modification validation for newer Servlet methods - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/21 16:49:00 UTC, 0 replies.
- [jira] [Created] (SLING-13358) Include warnings/protection cannot be changed on runtime - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/21 16:56:00 UTC, 0 replies.
- [PR] SLING-13358 include protections should be re-configurable" [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/21 16:58:56 UTC, 0 replies.
- Re: [PR] SLING-13358 include protections should be re-configurable [sling-org-apache-sling-engine] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 17:03:06 UTC, 1 replies.
- [jira] [Assigned] (SLING-13358) Include warnings/protection cannot be changed on runtime - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 07:50:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13358) Include warnings/protection cannot be changed on runtime - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 07:51:00 UTC, 0 replies.
- [jira] [Created] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 10:19:00 UTC, 0 replies.
- [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/22 10:30:31 UTC, 4 replies.
- [jira] [Assigned] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 10:31:00 UTC, 0 replies.
- [jira] [Created] (SLING-13360) all log directives should handle CR/LF escaping - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 11:35:00 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2568 is FIXED - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/22 11:37:07 UTC, 0 replies.
- [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/22 11:39:06 UTC, 5 replies.
- [jira] [Created] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 12:16:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/22 12:16:00 UTC, 0 replies.
- [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/22 12:53:03 UTC, 3 replies.
- [jira] [Resolved] (SLING-13360) all log directives should handle CR/LF escaping - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/23 17:18:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/23 17:34:00 UTC, 0 replies.
- [jira] [Created] (SLING-13362) Fix parameter parsing - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/23 18:30:00 UTC, 0 replies.
- [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/23 18:30:41 UTC, 3 replies.
- [jira] [Resolved] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/24 09:07:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13357) Implement header-modification validation for setCharacterEncoding - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/24 09:54:00 UTC, 0 replies.
- [jira] [Created] (SLING-13363) Open-redirect hardening gaps in post-login redirect parameter handling (Sling OAuth Client) — defense-in-depth - posted by "Nicola Scendoni (Jira)" <ji...@apache.org> on 2026/09/24 11:56:00 UTC, 0 replies.
- [jira] [Commented] (SLING-13363) Open-redirect hardening gaps in post-login redirect parameter handling (Sling OAuth Client) — defense-in-depth - posted by "Nicola Scendoni (Jira)" <ji...@apache.org> on 2026/09/24 13:01:00 UTC, 0 replies.
- [jira] [Created] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/24 14:20:00 UTC, 0 replies.
- Re: [PR] SLING-13282 Support automatic decryption in Context-Aware Configurations [sling-org-apache-sling-caconfig-impl] - posted by "kwin (via GitHub)" <gi...@apache.org> on 2026/09/24 14:45:15 UTC, 0 replies.
- [jira] [Resolved] (SLING-13362) Fix parameter parsing - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/24 15:38:00 UTC, 0 replies.
- [PR] SLING-13364 if the parameter parsing fails throw a statuscode 400 [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/25 10:35:12 UTC, 2 replies.
- [jira] [Updated] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/25 10:36:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/25 10:36:00 UTC, 0 replies.
- [jira] [Created] (SLING-13365) when the too many parameters are provided,fail the request - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/25 11:12:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13365) when the too many parameters are provided,fail the request - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/25 11:16:00 UTC, 0 replies.
- [PR] SLING-13365 fail by default when providing more than 10'000 parameters [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/25 11:16:37 UTC, 4 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-resource] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 11:47:08 UTC, 2 replies.
- [jira] [Assigned] (SLING-13365) when the too many parameters are provided,fail the request - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/25 12:18:00 UTC, 0 replies.
- [jira] [Created] (SLING-13366) ParameterSupport: Don't log CR/LF characters - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/25 12:29:00 UTC, 0 replies.
- [PR] SLING-13366 don't log un-escaped input [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/25 12:33:47 UTC, 3 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-servlets-post] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:43:59 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-scripting-core] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:44:09 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-security] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:44:21 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-oak-server] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:44:29 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-commons-messaging-mail] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:44:38 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-base] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:53:07 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-commons-crypto] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:53:17 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-auth-core] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:53:44 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-auth-form] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 14:53:54 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-jcr-jackrabbit-base] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/25 15:58:26 UTC, 2 replies.
- Re: [PR] Bump org.jsoup:jsoup from 1.15.3 to 1.23.1 [sling-org-apache-sling-scripting-core] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/26 06:36:32 UTC, 0 replies.
- Re: [PR] Fix for NPE when flushBuffer is called before getWriter [sling-org-apache-sling-scripting-core] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/26 06:36:58 UTC, 0 replies.
- Re: [PR] Bump org.apache.commons:commons-lang3 from 3.5 to 3.18.0 [sling-org-apache-sling-jcr-resource] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/26 10:16:52 UTC, 0 replies.
- [jira] [Resolved] (SLING-13356) ResourceDistributionPackageCleanup deletes all disposable packages in a single unbounded JCR commit - posted by "Christian Schneider (Jira)" <ji...@apache.org> on 2026/09/26 18:45:00 UTC, 0 replies.
- Re: [PR] Bump commons-io:commons-io from 2.5 to 2.14.0 [sling-org-apache-sling-distribution-core] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/27 08:24:23 UTC, 0 replies.
- Re: [PR] Fix digestAlgorithm NONE handling in Vault distribution package builder [sling-org-apache-sling-distribution-core] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/27 08:25:56 UTC, 0 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-engine] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/27 15:05:39 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-servlets-resolver] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/27 15:06:02 UTC, 2 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-xss] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/27 15:06:12 UTC, 1 replies.
- Re: [PR] Bump org.apache.jackrabbit:jackrabbit-jcr-commons from 1.6.0 to 2.22.2 [sling-org-apache-sling-servlets-post] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 06:58:01 UTC, 0 replies.
- [jira] [Resolved] (SLING-13323) Resource Resolver: when paging encounters unexpected values, log the position inside the page as well - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/28 10:26:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13326) incorrect results from ResourceResolver.getParentResourceType() cache - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/28 10:28:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13248) Exception while initializing Vanity paths - posted by "Julian Reschke (Jira)" <ji...@apache.org> on 2026/09/28 13:25:00 UTC, 0 replies.
- [PR] OSGiServiceInjector: cache service references and service objects instead of querying the service registry per injection [sling-org-apache-sling-models-impl] - posted by "pat-lego (via GitHub)" <gi...@apache.org> on 2026/09/28 20:46:17 UTC, 2 replies.
- [jira] [Created] (SLING-13367) OSGiServiceInjector: cache service references and service objects instead of querying the service registry for every injection - posted by "Patrique Legault (Jira)" <ji...@apache.org> on 2026/09/28 21:08:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 08:54:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13366) ParameterSupport: Don't log CR/LF characters - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 09:25:00 UTC, 1 replies.
- [jira] [Resolved] (SLING-13366) ParameterSupport: Don't log CR/LF characters - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 09:25:00 UTC, 0 replies.
- [jira] [Assigned] (SLING-13366) ParameterSupport: Don't log CR/LF characters - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 09:26:00 UTC, 0 replies.
- [jira] [Resolved] (SLING-13365) when the too many parameters are provided,fail the request - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 10:05:00 UTC, 0 replies.
- [jira] [Created] (SLING-13368) Improve error handling when no ErrorHandler is registered - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 10:15:00 UTC, 0 replies.
- [PR] SLING-13368 do not send a stacktrace if no ErrorHandler is registered [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/29 10:38:01 UTC, 1 replies.
- [RT] Aligning Jira components with our git repos? - posted by Carsten Ziegeler <cz...@apache.org> on 2026/09/29 11:51:02 UTC, 3 replies.
- [jira] [Created] (SLING-13369) feature-cpconverter: Restrict and validate package dependencies of generated mutable packages - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/29 13:06:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13368) Improve error handling when no ErrorHandler is registered - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 13:53:00 UTC, 0 replies.
- Re: [PR] SLING-13368 don't log sensitive information on the DefaulErrorHandler [sling-org-apache-sling-engine] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 14:11:47 UTC, 1 replies.
- [jira] [Assigned] (SLING-13370) Improve request error handling - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 14:42:00 UTC, 0 replies.
- [jira] [Created] (SLING-13370) Improve request error handling - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 14:42:00 UTC, 0 replies.
- [jira] [Updated] (SLING-13369) feature-cpconverter: Restrict and validate package dependencies of generated mutable packages - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/29 15:08:00 UTC, 0 replies.
- [PR] SLING-13370 improve error handling [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/29 16:11:26 UTC, 2 replies.
- [jira] [Created] (SLING-13371) Path resolution diverges from container path info when URL contains a ';' path parameter - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/29 21:28:00 UTC, 0 replies.
- [PR] SLING-13371 Fix path resolution divergence for ';' path parameters [sling-org-apache-sling-engine] - posted by "joerghoh (via GitHub)" <gi...@apache.org> on 2026/09/29 21:32:50 UTC, 5 replies.
- Re: [PR] Bump org.apache.jackrabbit:jackrabbit-core from 2.5.2 to 2.22.2 [sling-org-apache-sling-jcr-jackrabbit-base] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 07:01:56 UTC, 0 replies.
- [jira] [Commented] (SLING-13369) feature-cpconverter: Restrict and validate package dependencies of generated mutable packages - posted by "Konrad Windszus (Jira)" <ji...@apache.org> on 2026/09/30 07:13:00 UTC, 0 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-servlets-get] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/30 07:15:32 UTC, 0 replies.
- [PR] chore: remove obsolete CLAUDE.md pointer [sling-org-apache-sling-scripting-spi] - posted by "cziegeler (via GitHub)" <gi...@apache.org> on 2026/09/30 07:15:41 UTC, 1 replies.
- Re: [PR] update to latest versions of still supported Jackrabbit branches [sling-org-apache-sling-jcr-base] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 07:39:53 UTC, 0 replies.
- Re: [PR] Bump org.apache.jackrabbit:jackrabbit-jcr-commons from 2.0.0 to 2.22.2 [sling-org-apache-sling-jcr-base] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 07:40:01 UTC, 0 replies.
- [jira] [Resolved] (SLING-13368) Improve error handling when no ErrorHandler is registered - posted by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/30 08:31:00 UTC, 0 replies.
- Re: [PR] Bump org.apache.sling.api from 2.1.0 to 2.25.4 [sling-org-apache-sling-security] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 09:49:34 UTC, 0 replies.
- Committer round table at adaptTo 2026 notes - posted by Stefan Seifert via dev <de...@sling.apache.org> on 2026/09/30 10:17:33 UTC, 0 replies.
- [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2576 is BROKEN - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/09/30 11:29:42 UTC, 0 replies.