You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by ra...@apache.org on 2019/01/29 12:24:51 UTC

svn commit: r32189 - /release/sling/

Author: radu
Date: Tue Jan 29 12:24:51 2019
New Revision: 32189

Log:
Added Apache Sling XSS Protection API 2.1.0

Added:
    release/sling/org.apache.sling.xss-2.1.0-javadoc.jar   (with props)
    release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.asc
    release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.md5
    release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.sha1
    release/sling/org.apache.sling.xss-2.1.0-source-release.zip   (with props)
    release/sling/org.apache.sling.xss-2.1.0-source-release.zip.asc
    release/sling/org.apache.sling.xss-2.1.0-source-release.zip.md5
    release/sling/org.apache.sling.xss-2.1.0-source-release.zip.sha1
    release/sling/org.apache.sling.xss-2.1.0-sources.jar   (with props)
    release/sling/org.apache.sling.xss-2.1.0-sources.jar.asc
    release/sling/org.apache.sling.xss-2.1.0-sources.jar.md5
    release/sling/org.apache.sling.xss-2.1.0-sources.jar.sha1
    release/sling/org.apache.sling.xss-2.1.0.jar   (with props)
    release/sling/org.apache.sling.xss-2.1.0.jar.asc
    release/sling/org.apache.sling.xss-2.1.0.jar.md5
    release/sling/org.apache.sling.xss-2.1.0.jar.sha1
    release/sling/org.apache.sling.xss-2.1.0.pom
    release/sling/org.apache.sling.xss-2.1.0.pom.asc
    release/sling/org.apache.sling.xss-2.1.0.pom.md5
    release/sling/org.apache.sling.xss-2.1.0.pom.sha1
Removed:
    release/sling/org.apache.sling.xss-2.0.14-javadoc.jar
    release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.asc
    release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.md5
    release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.sha1
    release/sling/org.apache.sling.xss-2.0.14-source-release.zip
    release/sling/org.apache.sling.xss-2.0.14-source-release.zip.asc
    release/sling/org.apache.sling.xss-2.0.14-source-release.zip.md5
    release/sling/org.apache.sling.xss-2.0.14-source-release.zip.sha1
    release/sling/org.apache.sling.xss-2.0.14-sources.jar
    release/sling/org.apache.sling.xss-2.0.14-sources.jar.asc
    release/sling/org.apache.sling.xss-2.0.14-sources.jar.md5
    release/sling/org.apache.sling.xss-2.0.14-sources.jar.sha1
    release/sling/org.apache.sling.xss-2.0.14.jar
    release/sling/org.apache.sling.xss-2.0.14.jar.asc
    release/sling/org.apache.sling.xss-2.0.14.jar.md5
    release/sling/org.apache.sling.xss-2.0.14.jar.sha1
    release/sling/org.apache.sling.xss-2.0.14.pom
    release/sling/org.apache.sling.xss-2.0.14.pom.asc
    release/sling/org.apache.sling.xss-2.0.14.pom.md5
    release/sling/org.apache.sling.xss-2.0.14.pom.sha1

Added: release/sling/org.apache.sling.xss-2.1.0-javadoc.jar
==============================================================================
Binary file - no diff available.

Propchange: release/sling/org.apache.sling.xss-2.1.0-javadoc.jar
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.asc Tue Jan 29 12:24:51 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=KGPh
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.md5 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+9e634b32edbc5ac33edca38cfa64df37
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.1.0-javadoc.jar.sha1 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+cd6602831a7ba8383d761a3e829441d6998b92e8
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0-source-release.zip
==============================================================================
Binary file - no diff available.

Propchange: release/sling/org.apache.sling.xss-2.1.0-source-release.zip
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: release/sling/org.apache.sling.xss-2.1.0-source-release.zip.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-source-release.zip.asc (added)
+++ release/sling/org.apache.sling.xss-2.1.0-source-release.zip.asc Tue Jan 29 12:24:51 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=xZZv
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.1.0-source-release.zip.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-source-release.zip.md5 (added)
+++ release/sling/org.apache.sling.xss-2.1.0-source-release.zip.md5 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+0c6ba5ab57d678a3c94b907e45ccf72b
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0-source-release.zip.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-source-release.zip.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.1.0-source-release.zip.sha1 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+dde6188de89d05e763b76a0f06f27e7c2136a19a
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0-sources.jar
==============================================================================
Binary file - no diff available.

Propchange: release/sling/org.apache.sling.xss-2.1.0-sources.jar
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: release/sling/org.apache.sling.xss-2.1.0-sources.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-sources.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.1.0-sources.jar.asc Tue Jan 29 12:24:51 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Y/ni
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.1.0-sources.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-sources.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.1.0-sources.jar.md5 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+b635082c41bd2c884b5127d1343032e8
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0-sources.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0-sources.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.1.0-sources.jar.sha1 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+399d2709a17bb221eb97fc948a981bc9bcb166b3
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0.jar
==============================================================================
Binary file - no diff available.

Propchange: release/sling/org.apache.sling.xss-2.1.0.jar
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: release/sling/org.apache.sling.xss-2.1.0.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.1.0.jar.asc Tue Jan 29 12:24:51 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=SRl2
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.1.0.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.1.0.jar.md5 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+6433ceb29a341926c3118bf6348b2433
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.1.0.jar.sha1 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+5e45b058e35d93faffe445a4c3f01b6d911e4a50
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0.pom
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.pom (added)
+++ release/sling/org.apache.sling.xss-2.1.0.pom Tue Jan 29 12:24:51 2019
@@ -0,0 +1,295 @@
+<?xml version="1.0"?>
+<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+  ~ Licensed to the Apache Software Foundation (ASF) under one or
+  ~ more contributor license agreements. See the NOTICE file
+  ~ distributed with this work for additional information regarding
+  ~ copyright ownership. The ASF licenses this file to you under the
+  ~ Apache License, Version 2.0 (the "License"); you may not use
+  ~ this file except in compliance with the License. You may obtain
+  ~ a copy of the License at
+  ~
+  ~ http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+  ~ applicable law or agreed to in writing, software distributed
+  ~ under the License is distributed on an "AS IS" BASIS, WITHOUT
+  ~ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions
+  ~ and limitations under the License.
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <!-- ======================================================================= -->
+    <!-- P A R E N T   P R O J E C T                                             -->
+    <!-- ======================================================================= -->
+    <parent>
+        <groupId>org.apache.sling</groupId>
+        <artifactId>sling</artifactId>
+        <version>30</version>
+        <relativePath />
+    </parent>
+
+    <!-- ======================================================================= -->
+    <!-- P R O J E C T                                                           -->
+    <!-- ======================================================================= -->
+    <artifactId>org.apache.sling.xss</artifactId>
+    <packaging>bundle</packaging>
+    <version>2.1.0</version>
+
+    <name>Apache Sling XSS Protection</name>
+    <description>
+        Apache Sling XSS Protection Bundle providing XSS protection based on the OWASP AntiSamy and OWASP Java Encoder libraries.
+    </description>
+
+    <scm>
+        <connection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</connection>
+        <developerConnection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</developerConnection>
+        <url>https://gitbox.apache.org/repos/asf?p=sling-org-apache-sling-xss.git</url>
+      <tag>org.apache.sling.xss-2.1.0</tag>
+  </scm>
+
+
+    <!-- ======================================================================= -->
+    <!-- B U I L D                                                               -->
+    <!-- ======================================================================= -->
+    <build>
+        <pluginManagement>
+            <plugins>
+                <plugin>
+                    <!-- Extend RAT configuration from parent pom -->
+                    <groupId>org.apache.rat</groupId>
+                    <artifactId>apache-rat-plugin</artifactId>
+                    <configuration>
+                        <excludes combine.children="append">
+                            <exclude>src/main/resources/ESAPI.properties</exclude>
+                            <exclude>src/main/resources/validation.properties</exclude>
+                        </excludes>
+                    </configuration>
+                </plugin>
+            </plugins>
+        </pluginManagement>
+
+        <plugins>
+            <plugin>
+                <groupId>org.apache.sling</groupId>
+                <artifactId>maven-sling-plugin</artifactId>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.felix</groupId>
+                <artifactId>maven-bundle-plugin</artifactId>
+                <extensions>true</extensions>
+                <configuration>
+                    <instructions>
+                        <Import-Package>
+                            !bsh,
+                            !nu.xom,
+                            !org.apache.log4j.spi,
+                            !org.apache.log4j.xml,
+                            !org.w3c.dom.svg,
+                            !org.apache.avalon.framework.logger,
+                            !org.apache.commons.jxpath.*,
+                            !org.apache.commons.digester.*,
+                            !org.apache.tools.ant.taskdefs,
+                            !org.apache.xml.resolver,
+                            !org.apache.xml.resolver.readers,
+                            !org.apache.xmlgraphics.java2d.color,
+                            !org.apache.log,
+                            !javax.mail.internet,
+                            !javax.servlet.jsp,
+                            !javax.servlet.jsp.tagext,
+                            !sun.io,
+                            *
+                        </Import-Package>
+                        <Private-Package>
+                            org.apache.sling.xss.impl,
+                            org.apache.batik.*,
+                            org.w3c.css.sac,
+                            org.apache.xerces.*,
+                            org.apache.xml.serialize,
+                            org.apache.commons.beanutils.*;-split-package:=merge-first,
+                            org.apache.commons.configuration.*,
+                            org.apache.commons.logging.impl,
+                            org.cyberneko.html.*,
+                        </Private-Package>
+                        <Embed-Dependency>
+                            antisamy;inline=true,
+                            esapi;inline=true,
+                            encoder;inline=true
+                        </Embed-Dependency>
+                    </instructions>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <!-- ======================================================================= -->
+    <!-- D E P E N D E N C I E S                                                 -->
+    <!-- ======================================================================= -->
+    <dependencies>
+        <dependency>
+            <groupId>org.owasp.antisamy</groupId>
+            <artifactId>antisamy</artifactId>
+            <version>1.5.7</version>
+            <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>nu.xom</groupId>
+                    <artifactId>com.springsource.nu.xom</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>bsh</groupId>
+                    <artifactId>bsh</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>org.axsl.org.w3c.dom.svg</groupId>
+                    <artifactId>svg-dom-java</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>commons-jxpath</groupId>
+                    <artifactId>commons-jxpath</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>org.apache.commons</groupId>
+                    <artifactId>commons-digester3</artifactId>
+                </exclusion>
+                <!-- #40108 - XSS protection does not work on Java 5 -->
+                <!-- Replace batik-css 1.7 with 1.6. See below.      -->
+                <exclusion>
+                    <groupId>org.apache.xmlgraphics</groupId>
+                    <artifactId>batik-css</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <!-- <#40108 - XSS protection does not work on Java 5>  -->
+        <!-- Replace batik-css 1.7 with 1.6 to avoid breaking   -->
+        <!-- the build on Java 5. The batik-css 1.6 pom doesn't -->
+        <!-- have proper dependency metadata, so we need to     -->
+        <!-- reconstruct the full list here.                    -->
+        <!-- TODO: Remove this workaround when we dump Java 5.  -->
+        <dependency>
+            <groupId>org.apache.xmlgraphics</groupId>
+            <artifactId>batik-css</artifactId>
+            <version>1.9.1</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>xml-apis</groupId>
+            <artifactId>xml-apis</artifactId>
+            <version>1.4.01</version>
+            <scope>provided</scope>
+        </dependency>
+        <!-- </#40108 - XSS protection does not work on Java 5> -->
+
+        <dependency>
+            <groupId>org.owasp.esapi</groupId>
+            <artifactId>esapi</artifactId>
+            <version>2.1.0</version>
+            <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>nu.xom</groupId>
+                    <artifactId>com.springsource.nu.xom</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>bsh</groupId>
+                    <artifactId>bsh</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>org.axsl.org.w3c.dom.svg</groupId>
+                    <artifactId>svg-dom-java</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>commons-jxpath</groupId>
+                    <artifactId>commons-jxpath</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>org.apache.commons</groupId>
+                    <artifactId>commons-digester3</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+
+        <dependency>
+            <groupId>org.owasp.encoder</groupId>
+            <artifactId>encoder</artifactId>
+            <scope>provided</scope>
+            <version>1.1.1</version>
+        </dependency>
+
+        <dependency>
+            <groupId>javax.servlet</groupId>
+            <artifactId>javax.servlet-api</artifactId>
+            <scope>provided</scope>
+        </dependency>
+
+        <dependency>
+            <groupId>org.osgi</groupId>
+            <artifactId>osgi.core</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-api</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.api</artifactId>
+            <version>2.11.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+          <groupId>org.apache.sling</groupId>
+          <artifactId>org.apache.sling.serviceusermapper</artifactId>
+          <version>1.2.0</version>
+          <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.jetbrains</groupId>
+            <artifactId>annotations</artifactId>
+            <version>16.0.2</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.geronimo.specs</groupId>
+            <artifactId>geronimo-json_1.0_spec</artifactId>
+            <version>1.0-alpha-1</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.6</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>junit</groupId>
+            <artifactId>junit</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.mockito</groupId>
+            <artifactId>mockito-all</artifactId>
+            <version>1.10.19</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.powermock</groupId>
+            <artifactId>powermock-api-mockito</artifactId>
+            <version>1.6.5</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.commons.johnzon</artifactId>
+            <version>1.0.0</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-simple</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.sling</groupId>
+            <artifactId>org.apache.sling.testing.sling-mock</artifactId>
+            <version>2.2.18</version>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+</project>

Added: release/sling/org.apache.sling.xss-2.1.0.pom.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.pom.asc (added)
+++ release/sling/org.apache.sling.xss-2.1.0.pom.asc Tue Jan 29 12:24:51 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=ee4G
+-----END PGP SIGNATURE-----

Added: release/sling/org.apache.sling.xss-2.1.0.pom.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.pom.md5 (added)
+++ release/sling/org.apache.sling.xss-2.1.0.pom.md5 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+fdd8f793e832c5a585da7478ca687c12
\ No newline at end of file

Added: release/sling/org.apache.sling.xss-2.1.0.pom.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.1.0.pom.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.1.0.pom.sha1 Tue Jan 29 12:24:51 2019
@@ -0,0 +1 @@
+d6dd86b89691f2adff1268c2d6e2e0e6213ed39b
\ No newline at end of file