You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by pa...@apache.org on 2017/05/05 10:55:10 UTC
svn commit: r19475 - /release/sling/
Author: pauls
Date: Fri May 5 10:55:10 2017
New Revision: 19475
Log:
Add the Apache Sling XSS Protection Compat Bundle version 1.0.0 and the Apache Sling XSS Protection Bundle version 2.0.0 releases.
Added:
release/sling/org.apache.sling.xss-2.0.0-javadoc.jar (with props)
release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.asc
release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.md5
release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.sha1
release/sling/org.apache.sling.xss-2.0.0-source-release.zip (with props)
release/sling/org.apache.sling.xss-2.0.0-source-release.zip.asc
release/sling/org.apache.sling.xss-2.0.0-source-release.zip.md5
release/sling/org.apache.sling.xss-2.0.0-source-release.zip.sha1
release/sling/org.apache.sling.xss-2.0.0-sources.jar (with props)
release/sling/org.apache.sling.xss-2.0.0-sources.jar.asc
release/sling/org.apache.sling.xss-2.0.0-sources.jar.md5
release/sling/org.apache.sling.xss-2.0.0-sources.jar.sha1
release/sling/org.apache.sling.xss-2.0.0.jar (with props)
release/sling/org.apache.sling.xss-2.0.0.jar.asc
release/sling/org.apache.sling.xss-2.0.0.jar.md5
release/sling/org.apache.sling.xss-2.0.0.jar.sha1
release/sling/org.apache.sling.xss-2.0.0.pom
release/sling/org.apache.sling.xss-2.0.0.pom.asc
release/sling/org.apache.sling.xss-2.0.0.pom.md5
release/sling/org.apache.sling.xss-2.0.0.pom.sha1
release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar (with props)
release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.asc
release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.md5
release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.sha1
release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip (with props)
release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.asc
release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.md5
release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.sha1
release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar (with props)
release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.asc
release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.md5
release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.sha1
release/sling/org.apache.sling.xss.compat-1.0.0.jar (with props)
release/sling/org.apache.sling.xss.compat-1.0.0.jar.asc
release/sling/org.apache.sling.xss.compat-1.0.0.jar.md5
release/sling/org.apache.sling.xss.compat-1.0.0.jar.sha1
release/sling/org.apache.sling.xss.compat-1.0.0.pom
release/sling/org.apache.sling.xss.compat-1.0.0.pom.asc
release/sling/org.apache.sling.xss.compat-1.0.0.pom.md5
release/sling/org.apache.sling.xss.compat-1.0.0.pom.sha1
Removed:
release/sling/org.apache.sling.xss-1.0.18-javadoc.jar
release/sling/org.apache.sling.xss-1.0.18-javadoc.jar.asc
release/sling/org.apache.sling.xss-1.0.18-javadoc.jar.md5
release/sling/org.apache.sling.xss-1.0.18-javadoc.jar.sha1
release/sling/org.apache.sling.xss-1.0.18-source-release.zip
release/sling/org.apache.sling.xss-1.0.18-source-release.zip.asc
release/sling/org.apache.sling.xss-1.0.18-source-release.zip.md5
release/sling/org.apache.sling.xss-1.0.18-source-release.zip.sha1
release/sling/org.apache.sling.xss-1.0.18-sources.jar
release/sling/org.apache.sling.xss-1.0.18-sources.jar.asc
release/sling/org.apache.sling.xss-1.0.18-sources.jar.md5
release/sling/org.apache.sling.xss-1.0.18-sources.jar.sha1
release/sling/org.apache.sling.xss-1.0.18.jar
release/sling/org.apache.sling.xss-1.0.18.jar.asc
release/sling/org.apache.sling.xss-1.0.18.jar.md5
release/sling/org.apache.sling.xss-1.0.18.jar.sha1
release/sling/org.apache.sling.xss-1.0.18.pom
release/sling/org.apache.sling.xss-1.0.18.pom.asc
release/sling/org.apache.sling.xss-1.0.18.pom.md5
release/sling/org.apache.sling.xss-1.0.18.pom.sha1
Added: release/sling/org.apache.sling.xss-2.0.0-javadoc.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.0-javadoc.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHpCwACgkQkFSCOoWacjdkHgCfeKYz8Vyqd8Uo1pZ6CWEt64p0
+ZbkAoLIT9nxmN5YsHBEWObljHdCxbC2Y
+=0gMf
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+a5439bc56f83347bf407fbc2beaac78f
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.0-javadoc.jar.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+ea231d396ae512990ab0b2ce7dc71b53dc5bffa7
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0-source-release.zip
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.0-source-release.zip
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.0-source-release.zip.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-source-release.zip.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.0-source-release.zip.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHpCoACgkQkFSCOoWacjdWoQCgjeY1NHcEJKEWb97XuifPAZlM
+IMUAoKyUYjxi24wnLU9nGxE4u9jkEF+c
+=6noN
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.0-source-release.zip.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-source-release.zip.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.0-source-release.zip.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+e42e93d524a467f49236c3c492f7d696
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0-source-release.zip.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-source-release.zip.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.0-source-release.zip.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+10cb52b6d519d4f73308f6ee545177c0185a9272
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0-sources.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.0-sources.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.0-sources.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-sources.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.0-sources.jar.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHpCsACgkQkFSCOoWacjf32ACfaGy11gSgHEwf3jvPruHA4LJB
+0dsAoJ3sNSi6MNd9jBfSFHA5y+JFLd0F
+=FKMk
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.0-sources.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-sources.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.0-sources.jar.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+78a7144c0e3cafe70c36ff43d64f91cc
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0-sources.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0-sources.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.0-sources.jar.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+0f076c3243b3a01044ae73ff960611338ecefd4f
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.0.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.0.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.0.jar.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHpCcACgkQkFSCOoWacjezZwCgiG8jNnEODNuJ53wiKS2QI70s
+zMgAoKp/pTrxO0xHoDiCmak71EVY1cI/
+=JZBK
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.0.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.0.jar.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+b53f1f485da06d079b6f530238bb24d3
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.0.jar.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+97730a96a9c1c73e4ef859832d2c3400520750d7
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0.pom
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.pom (added)
+++ release/sling/org.apache.sling.xss-2.0.0.pom Fri May 5 10:55:10 2017
@@ -0,0 +1,302 @@
+<?xml version="1.0"?>
+<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ ~ Licensed to the Apache Software Foundation (ASF) under one or
+ ~ more contributor license agreements. See the NOTICE file
+ ~ distributed with this work for additional information regarding
+ ~ copyright ownership. The ASF licenses this file to you under the
+ ~ Apache License, Version 2.0 (the "License"); you may not use
+ ~ this file except in compliance with the License. You may obtain
+ ~ a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+ ~ applicable law or agreed to in writing, software distributed
+ ~ under the License is distributed on an "AS IS" BASIS, WITHOUT
+ ~ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions
+ ~ and limitations under the License.
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <!-- ======================================================================= -->
+ <!-- P A R E N T P R O J E C T -->
+ <!-- ======================================================================= -->
+ <parent>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>sling</artifactId>
+ <version>30</version>
+ <relativePath />
+ </parent>
+
+ <!-- ======================================================================= -->
+ <!-- P R O J E C T -->
+ <!-- ======================================================================= -->
+ <artifactId>org.apache.sling.xss</artifactId>
+ <packaging>bundle</packaging>
+ <version>2.0.0</version>
+
+ <name>Apache Sling XSS Protection Bundle</name>
+ <description>
+ Apache Sling XSS Protection Bundle providing XSS protection based on the OWASP AntiSamy and OWASP Java Encoder libraries.
+ </description>
+
+ <scm>
+ <connection>scm:svn:http://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss-2.0.0</connection>
+ <developerConnection>scm:svn:https://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss-2.0.0</developerConnection>
+ <url>http://svn.apache.org/viewvc/sling/tags/org.apache.sling.xss-2.0.0</url>
+ </scm>
+
+
+ <!-- ======================================================================= -->
+ <!-- B U I L D -->
+ <!-- ======================================================================= -->
+ <build>
+ <pluginManagement>
+ <plugins>
+ <plugin>
+ <!-- Extend RAT configuration from parent pom -->
+ <groupId>org.apache.rat</groupId>
+ <artifactId>apache-rat-plugin</artifactId>
+ <configuration>
+ <excludes combine.children="append">
+ <exclude>src/main/resources/ESAPI.properties</exclude>
+ <exclude>src/main/resources/validation.properties</exclude>
+ </excludes>
+ </configuration>
+ </plugin>
+ </plugins>
+ </pluginManagement>
+
+ <plugins>
+ <plugin>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>maven-sling-plugin</artifactId>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.felix</groupId>
+ <artifactId>maven-bundle-plugin</artifactId>
+ <extensions>true</extensions>
+ <configuration>
+ <instructions>
+ <Import-Package>
+ !bsh,
+ !nu.xom,
+ !org.apache.log4j.spi,
+ !org.apache.log4j.xml,
+ !org.w3c.dom.svg,
+ !org.apache.avalon.framework.logger,
+ !org.apache.commons.jxpath.*,
+ !org.apache.commons.digester.*,
+ !org.apache.tools.ant.taskdefs,
+ !org.apache.xml.resolver,
+ !org.apache.xml.resolver.readers,
+ !org.apache.log,
+ !javax.mail.internet,
+ !javax.servlet.jsp,
+ !javax.servlet.jsp.tagext,
+ !sun.io,
+ *
+ </Import-Package>
+ <Private-Package>
+ org.apache.sling.xss.impl,
+ org.apache.batik.*,
+ org.w3c.css.sac,
+ org.apache.xerces.*,
+ org.apache.xml.serialize,
+ org.apache.commons.beanutils.*;-split-package:=merge-first,
+ org.apache.commons.configuration.*,
+ org.apache.commons.logging.impl,
+ org.cyberneko.html.*,
+ </Private-Package>
+ <Embed-Dependency>
+ antisamy;inline=true,
+ esapi;inline=true,
+ encoder;inline=true
+ </Embed-Dependency>
+ <Sling-Initial-Content>
+ SLING-INF/content;path:=/libs/sling/xss;overwrite:=true;ignoreImportProviders:=xml
+ </Sling-Initial-Content>
+ </instructions>
+ </configuration>
+ </plugin>
+ </plugins>
+ </build>
+
+ <!-- ======================================================================= -->
+ <!-- D E P E N D E N C I E S -->
+ <!-- ======================================================================= -->
+ <dependencies>
+ <dependency>
+ <groupId>org.owasp.antisamy</groupId>
+ <artifactId>antisamy</artifactId>
+ <version>1.5.2</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>nu.xom</groupId>
+ <artifactId>com.springsource.nu.xom</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>bsh</groupId>
+ <artifactId>bsh</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.axsl.org.w3c.dom.svg</groupId>
+ <artifactId>svg-dom-java</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>commons-jxpath</groupId>
+ <artifactId>commons-jxpath</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-digester3</artifactId>
+ </exclusion>
+ <!-- #40108 - XSS protection does not work on Java 5 -->
+ <!-- Replace batik-css 1.7 with 1.6. See below. -->
+ <exclusion>
+ <groupId>org.apache.xmlgraphics</groupId>
+ <artifactId>batik-css</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <!-- <#40108 - XSS protection does not work on Java 5> -->
+ <!-- Replace batik-css 1.7 with 1.6 to avoid breaking -->
+ <!-- the build on Java 5. The batik-css 1.6 pom doesn't -->
+ <!-- have proper dependency metadata, so we need to -->
+ <!-- reconstruct the full list here. -->
+ <!-- TODO: Remove this workaround when we dump Java 5. -->
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-css</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-ext</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-util</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-gui-util</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>xml-apis</groupId>
+ <artifactId>xml-apis-ext</artifactId>
+ <version>1.3.04</version>
+ <scope>provided</scope>
+ </dependency>
+ <!-- </#40108 - XSS protection does not work on Java 5> -->
+
+ <dependency>
+ <groupId>org.owasp.esapi</groupId>
+ <artifactId>esapi</artifactId>
+ <version>2.1.0</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>nu.xom</groupId>
+ <artifactId>com.springsource.nu.xom</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>bsh</groupId>
+ <artifactId>bsh</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.axsl.org.w3c.dom.svg</groupId>
+ <artifactId>svg-dom-java</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>commons-jxpath</groupId>
+ <artifactId>commons-jxpath</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-digester3</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+
+ <dependency>
+ <groupId>org.owasp.encoder</groupId>
+ <artifactId>encoder</artifactId>
+ <scope>provided</scope>
+ <version>1.1.1</version>
+ </dependency>
+
+ <dependency>
+ <groupId>javax.servlet</groupId>
+ <artifactId>javax.servlet-api</artifactId>
+ <scope>provided</scope>
+ </dependency>
+
+ <dependency>
+ <groupId>org.osgi</groupId>
+ <artifactId>osgi.core</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.slf4j</groupId>
+ <artifactId>slf4j-api</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.api</artifactId>
+ <version>2.11.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.serviceusermapper</artifactId>
+ <version>1.2.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>com.google.code.findbugs</groupId>
+ <artifactId>jsr305</artifactId>
+ <version>2.0.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.geronimo.specs</groupId>
+ <artifactId>geronimo-json_1.0_spec</artifactId>
+ <version>1.0-alpha-1</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>junit</groupId>
+ <artifactId>junit</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.mockito</groupId>
+ <artifactId>mockito-all</artifactId>
+ <version>1.10.19</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.powermock</groupId>
+ <artifactId>powermock-api-mockito</artifactId>
+ <version>1.6.5</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.commons.johnzon</artifactId>
+ <version>1.0.0</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.slf4j</groupId>
+ <artifactId>slf4j-simple</artifactId>
+ </dependency>
+ </dependencies>
+
+</project>
Added: release/sling/org.apache.sling.xss-2.0.0.pom.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.pom.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.0.pom.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHpCgACgkQkFSCOoWacjeFjACePjEWrmweSHNpztTynqogNXpD
+iykAni9T7/veP5V2n0837aw0bVCmfSXc
+=C5tO
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.0.pom.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.pom.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.0.pom.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+b2c6ad8a84b147d4d17078bc22fd8493
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.0.pom.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.0.pom.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.0.pom.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+23437af19107658a494e34d4b257cf91efed2904
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.asc (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHqIsACgkQkFSCOoWacjfhoACeLFdNc/5l92HB7bEkhmBNUDpC
+XtkAoLPeW/TJ89kaTpfQw75oRY5tFRvk
+=hPXw
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.md5 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+286bc2561cec70c00b9e64a60395de6c
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-javadoc.jar.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+6c0d6b2ba0050f5a3eb79d8934250f4f8ef15d64
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.asc
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.asc (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHqIgACgkQkFSCOoWacje5xQCcDXAy7t65kzQ0qzuzb1SDZqJG
+XjIAoIrcIp8vRazxJAjWuFdtYtf05ZlU
+=pu8P
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.md5
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.md5 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+f7e3f3bb1eae3124e15df56177d31f5b
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.sha1
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.sha1 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-source-release.zip.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+5bfea76613adec5489d370a254e1219515111ca3
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.asc (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHqIoACgkQkFSCOoWacjebNACeO5V0xQI1poQ9eGP5EV1CmOkB
+ZksAnRoi2naXt07J909FLBIUqtVuA9hJ
+=oDrf
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.md5 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+0a84149a4a61bb76d3f6d503e339ff48
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0-sources.jar.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+be148b3c393aca5a485acb866e38cd86c9e1b99e
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss.compat-1.0.0.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss.compat-1.0.0.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.jar.asc (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.jar.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHqIUACgkQkFSCOoWacjcAhQCfdsLsly7X4EAtV4VcPaACyM/5
+dgEAoLTjLvK1xWB4WLAvM+bM5OFdROiH
+=8slm
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss.compat-1.0.0.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.jar.md5 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.jar.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+49761a2966763bbf3c5bed0f7afe541c
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.jar.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+faa555729b10d1d27ae85a0ef2b2bd0cd492d36f
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0.pom
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.pom (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.pom Fri May 5 10:55:10 2017
@@ -0,0 +1,296 @@
+<?xml version="1.0"?>
+<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ ~ Licensed to the Apache Software Foundation (ASF) under one or
+ ~ more contributor license agreements. See the NOTICE file
+ ~ distributed with this work for additional information regarding
+ ~ copyright ownership. The ASF licenses this file to you under the
+ ~ Apache License, Version 2.0 (the "License"); you may not use
+ ~ this file except in compliance with the License. You may obtain
+ ~ a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+ ~ applicable law or agreed to in writing, software distributed
+ ~ under the License is distributed on an "AS IS" BASIS, WITHOUT
+ ~ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions
+ ~ and limitations under the License.
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <!-- ======================================================================= -->
+ <!-- P A R E N T P R O J E C T -->
+ <!-- ======================================================================= -->
+ <parent>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>sling</artifactId>
+ <version>26</version>
+ <relativePath />
+ </parent>
+
+ <!-- ======================================================================= -->
+ <!-- P R O J E C T -->
+ <!-- ======================================================================= -->
+ <artifactId>org.apache.sling.xss.compat</artifactId>
+ <packaging>bundle</packaging>
+ <version>1.0.0</version>
+
+ <name>Apache Sling XSS Protection Compat Bundle</name>
+ <description>
+ Apache Sling XSS Protection Compat Bundle providing XSS protection based on the OWASP AntiSamy and OWASP Java Encoder libraries.
+ </description>
+
+ <scm>
+ <connection>scm:svn:http://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss.compat-1.0.0</connection>
+ <developerConnection>scm:svn:https://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss.compat-1.0.0</developerConnection>
+ <url>http://svn.apache.org/viewvc/sling/tags/org.apache.sling.xss.compat-1.0.0</url>
+ </scm>
+
+
+ <!-- ======================================================================= -->
+ <!-- B U I L D -->
+ <!-- ======================================================================= -->
+ <build>
+ <pluginManagement>
+ <plugins>
+ <plugin>
+ <!-- Extend RAT configuration from parent pom -->
+ <groupId>org.apache.rat</groupId>
+ <artifactId>apache-rat-plugin</artifactId>
+ <configuration>
+ <excludes combine.children="append">
+ <exclude>src/main/resources/ESAPI.properties</exclude>
+ <exclude>src/main/resources/validation.properties</exclude>
+ </excludes>
+ </configuration>
+ </plugin>
+ </plugins>
+ </pluginManagement>
+
+ <plugins>
+ <plugin>
+ <groupId>org.apache.felix</groupId>
+ <artifactId>maven-scr-plugin</artifactId>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>maven-sling-plugin</artifactId>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.felix</groupId>
+ <artifactId>maven-bundle-plugin</artifactId>
+ <extensions>true</extensions>
+ <configuration>
+ <instructions>
+ <Import-Package>
+ !bsh,
+ !nu.xom,
+ !org.apache.log4j.spi,
+ !org.apache.log4j.xml,
+ !org.w3c.dom.svg,
+ !org.apache.avalon.framework.logger,
+ !org.apache.commons.jxpath.*,
+ !org.apache.commons.digester.*,
+ !org.apache.tools.ant.taskdefs,
+ !org.apache.xml.resolver,
+ !org.apache.xml.resolver.readers,
+ !org.apache.log,
+ !sun.io,
+ *
+ </Import-Package>
+ <Private-Package>
+ org.apache.sling.xss.impl,
+ org.apache.batik.*,
+ org.w3c.css.sac,
+ org.apache.xerces.*,
+ org.apache.xml.serialize,
+ org.apache.commons.beanutils.*;-split-package:=merge-first,
+ org.apache.commons.configuration.*,
+ org.apache.commons.logging.impl,
+ org.cyberneko.html.*,
+ </Private-Package>
+ <Embed-Dependency>
+ antisamy;inline=true,
+ esapi;inline=true,
+ encoder;inline=true
+ </Embed-Dependency>
+ <Sling-Initial-Content>
+ SLING-INF/content;path:=/libs/sling/xss;overwrite:=true;ignoreImportProviders:=xml
+ </Sling-Initial-Content>
+ </instructions>
+ </configuration>
+ </plugin>
+ </plugins>
+ </build>
+
+ <!-- ======================================================================= -->
+ <!-- D E P E N D E N C I E S -->
+ <!-- ======================================================================= -->
+ <dependencies>
+ <dependency>
+ <groupId>org.owasp.antisamy</groupId>
+ <artifactId>antisamy</artifactId>
+ <version>1.5.2</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>nu.xom</groupId>
+ <artifactId>com.springsource.nu.xom</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>bsh</groupId>
+ <artifactId>bsh</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.axsl.org.w3c.dom.svg</groupId>
+ <artifactId>svg-dom-java</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>commons-jxpath</groupId>
+ <artifactId>commons-jxpath</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-digester3</artifactId>
+ </exclusion>
+ <!-- #40108 - XSS protection does not work on Java 5 -->
+ <!-- Replace batik-css 1.7 with 1.6. See below. -->
+ <exclusion>
+ <groupId>org.apache.xmlgraphics</groupId>
+ <artifactId>batik-css</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <!-- <#40108 - XSS protection does not work on Java 5> -->
+ <!-- Replace batik-css 1.7 with 1.6 to avoid breaking -->
+ <!-- the build on Java 5. The batik-css 1.6 pom doesn't -->
+ <!-- have proper dependency metadata, so we need to -->
+ <!-- reconstruct the full list here. -->
+ <!-- TODO: Remove this workaround when we dump Java 5. -->
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-css</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-ext</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-util</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>batik</groupId>
+ <artifactId>batik-gui-util</artifactId>
+ <version>1.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>xml-apis</groupId>
+ <artifactId>xml-apis-ext</artifactId>
+ <version>1.3.04</version>
+ <scope>provided</scope>
+ </dependency>
+ <!-- </#40108 - XSS protection does not work on Java 5> -->
+
+ <dependency>
+ <groupId>org.owasp.esapi</groupId>
+ <artifactId>esapi</artifactId>
+ <version>2.1.0</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>nu.xom</groupId>
+ <artifactId>com.springsource.nu.xom</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>bsh</groupId>
+ <artifactId>bsh</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.axsl.org.w3c.dom.svg</groupId>
+ <artifactId>svg-dom-java</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>commons-jxpath</groupId>
+ <artifactId>commons-jxpath</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-digester3</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+
+ <dependency>
+ <groupId>org.owasp.encoder</groupId>
+ <artifactId>encoder</artifactId>
+ <scope>provided</scope>
+ <version>1.1.1</version>
+ </dependency>
+
+ <dependency>
+ <groupId>javax.servlet</groupId>
+ <artifactId>servlet-api</artifactId>
+ <scope>provided</scope>
+ </dependency>
+
+ <dependency>
+ <groupId>org.osgi</groupId>
+ <artifactId>org.osgi.core</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.osgi</groupId>
+ <artifactId>org.osgi.compendium</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.slf4j</groupId>
+ <artifactId>slf4j-api</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.api</artifactId>
+ <version>2.2.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.commons.json</artifactId>
+ <version>2.0.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>com.google.code.findbugs</groupId>
+ <artifactId>jsr305</artifactId>
+ <version>2.0.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>junit</groupId>
+ <artifactId>junit</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.mockito</groupId>
+ <artifactId>mockito-all</artifactId>
+ <version>1.8.4</version>
+ <type>jar</type>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.powermock</groupId>
+ <artifactId>powermock-api-mockito</artifactId>
+ <version>1.5.5</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.slf4j</groupId>
+ <artifactId>slf4j-simple</artifactId>
+ </dependency>
+ </dependencies>
+
+</project>
Added: release/sling/org.apache.sling.xss.compat-1.0.0.pom.asc
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.pom.asc (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.pom.asc Fri May 5 10:55:10 2017
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iEYEABECAAYFAlkHqIcACgkQkFSCOoWacjcuqgCfR6rjApVaOlvNB92IrCETxejQ
+0p8AoJJLb2XwVxQfz3E5Xy8GPVD4yRMt
+=/jzs
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss.compat-1.0.0.pom.md5
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.pom.md5 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.pom.md5 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+84dcfd4bddb2d81d22386d17a054b7de
\ No newline at end of file
Added: release/sling/org.apache.sling.xss.compat-1.0.0.pom.sha1
==============================================================================
--- release/sling/org.apache.sling.xss.compat-1.0.0.pom.sha1 (added)
+++ release/sling/org.apache.sling.xss.compat-1.0.0.pom.sha1 Fri May 5 10:55:10 2017
@@ -0,0 +1 @@
+565f02a7e860d8078fdcd374a4dcdb9a5b5b9af8
\ No newline at end of file