You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by js...@apache.org on 2016/11/10 12:35:05 UTC

svn commit: r1769104 - /sling/trunk/bundles/jcr/base/src/main/java/org/apache/sling/jcr/base/internal/DefaultWhitelist.java

Author: jsedding
Date: Thu Nov 10 12:35:05 2016
New Revision: 1769104

URL: http://svn.apache.org/viewvc?rev=1769104&view=rev
Log:
SLING-5135 - Whitelist legit usages of loginAdministrative and administrative ResourceResolver

- remove fixed bundles from DefaultWhitelist

Modified:
    sling/trunk/bundles/jcr/base/src/main/java/org/apache/sling/jcr/base/internal/DefaultWhitelist.java

Modified: sling/trunk/bundles/jcr/base/src/main/java/org/apache/sling/jcr/base/internal/DefaultWhitelist.java
URL: http://svn.apache.org/viewvc/sling/trunk/bundles/jcr/base/src/main/java/org/apache/sling/jcr/base/internal/DefaultWhitelist.java?rev=1769104&r1=1769103&r2=1769104&view=diff
==============================================================================
--- sling/trunk/bundles/jcr/base/src/main/java/org/apache/sling/jcr/base/internal/DefaultWhitelist.java (original)
+++ sling/trunk/bundles/jcr/base/src/main/java/org/apache/sling/jcr/base/internal/DefaultWhitelist.java Thu Nov 10 12:35:05 2016
@@ -24,6 +24,7 @@ package org.apache.sling.jcr.base.intern
  * minimum over time.
  */
 class DefaultWhitelist {
+    // TODO: remove bundles as their dependency on admin login is fixed, see SLING-5355 for linked issues
     static final String [] WHITELISTED_BSN = {
             "org.apache.sling.discovery.commons",
             "org.apache.sling.discovery.base",
@@ -36,15 +37,11 @@ class DefaultWhitelist {
             "org.apache.sling.jcr.davex",
             "org.apache.sling.jcr.jackrabbit.usermanager",
             "org.apache.sling.jcr.oak.server",
+            "org.apache.sling.jcr.repoinit",
             "org.apache.sling.jcr.resource",
             "org.apache.sling.jcr.webconsole",
-            "org.apache.sling.jcr.webdav",
-            "org.apache.sling.junit.core",
             "org.apache.sling.resourceresolver",
-            "org.apache.sling.scripting.core",
-            "org.apache.sling.scripting.sightly",
-            "org.apache.sling.servlets.post",
-            "org.apache.sling.servlets.resolver",
-            "org.apache.sling.xss"
+            "org.apache.sling.servlets.post", // remove when 2.3.16 is released
+            "org.apache.sling.servlets.resolver"
     };
 }
\ No newline at end of file