You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by ro...@apache.org on 2026/06/02 10:48:29 UTC
(sling-org-apache-sling-servlets-get) branch master updated: Add security section to AGENTS.md
This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-servlets-get.git
The following commit(s) were added to refs/heads/master by this push:
new 0f63863 Add security section to AGENTS.md
0f63863 is described below
commit 0f6386314d1697b007fd27e76f47a02a598af453
Author: Robert Munteanu <ro...@apache.org>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index c4c03ed..cabaedf 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -98,3 +98,10 @@ target/ Build output — do not edit
- **Sling API 3.x**: This bundle targets `org.apache.sling.api` 3.0.0, which uses `SlingJakartaHttpServletRequest`/`SlingJakartaHttpServletResponse`. These differ from the older `SlingHttpServletRequest` — don't mix them.
- **Parent POM version drift**: Many dependency versions (JUnit, Mockito, OSGi annotations) are managed by `sling-bundle-parent`. Check the parent before adding explicit versions.
- **RAT failures**: Adding files without license headers (e.g., test fixtures) will fail the RAT check. Add a RAT exclusion in the parent config or prepend the header.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+