You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Antonio Sanso (JIRA)" <ji...@apache.org> on 2015/11/18 14:54:11 UTC

[jira] [Commented] (SLING-5234) Remove getAdministrativeResourceResolver() usage from org.apache.sling.xss

    [ https://issues.apache.org/jira/browse/SLING-5234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15011014#comment-15011014 ] 

Antonio Sanso commented on SLING-5234:
--------------------------------------

There is one occurrence of getAdministrativeResourceResolver() in {{XSSFilterImpl}}.
AFAIU this would require read privilege for {{"sling/xss/config.xml"}}

> Remove getAdministrativeResourceResolver() usage from org.apache.sling.xss
> --------------------------------------------------------------------------
>
>                 Key: SLING-5234
>                 URL: https://issues.apache.org/jira/browse/SLING-5234
>             Project: Sling
>          Issue Type: Improvement
>          Components: Extensions
>    Affects Versions: XSS Protection API 1.0.6
>            Reporter: Antonio Sanso
>            Assignee: Radu Cotescu
>             Fix For: XSS Protection API 1.0.8
>
>
> counted 1 occurrence



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)