You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Radu Cotescu (Jira)" <ji...@apache.org> on 2019/11/22 16:07:00 UTC
[jira] [Resolved] (SLING-8857) Lower the log level for validation
errors in org.apache.sling.xss.impl.XSSFilterImpl#runHrefValidation
[ https://issues.apache.org/jira/browse/SLING-8857?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Radu Cotescu resolved SLING-8857.
---------------------------------
Resolution: Fixed
Fixed in [commit 4c6946c|https://github.com/apache/sling-org-apache-sling-xss/commit/4c6946c].
> Lower the log level for validation errors in org.apache.sling.xss.impl.XSSFilterImpl#runHrefValidation
> ------------------------------------------------------------------------------------------------------
>
> Key: SLING-8857
> URL: https://issues.apache.org/jira/browse/SLING-8857
> Project: Sling
> Issue Type: Bug
> Components: XSS Protection API
> Affects Versions: XSS Protection API 2.1.16
> Reporter: Radu Cotescu
> Assignee: Radu Cotescu
> Priority: Major
> Fix For: XSS Protection API 2.1.18
>
>
> When falling back to simpler regular expressions to validate URLs, the current log level is {{WARN}}, which is too high. This should be set to {{DEBUG}} and a {{WARN}} should be logged only if the URL cannot be validated.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)