You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by ra...@apache.org on 2019/01/24 13:28:39 UTC
svn commit: r32119 - /release/sling/
Author: radu
Date: Thu Jan 24 13:28:38 2019
New Revision: 32119
Log:
Added Apache Sling XSS Protection API 2.0.14
Added:
release/sling/org.apache.sling.xss-2.0.14-javadoc.jar (with props)
release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.asc
release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.md5
release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.sha1
release/sling/org.apache.sling.xss-2.0.14-source-release.zip (with props)
release/sling/org.apache.sling.xss-2.0.14-source-release.zip.asc
release/sling/org.apache.sling.xss-2.0.14-source-release.zip.md5
release/sling/org.apache.sling.xss-2.0.14-source-release.zip.sha1
release/sling/org.apache.sling.xss-2.0.14-sources.jar (with props)
release/sling/org.apache.sling.xss-2.0.14-sources.jar.asc
release/sling/org.apache.sling.xss-2.0.14-sources.jar.md5
release/sling/org.apache.sling.xss-2.0.14-sources.jar.sha1
release/sling/org.apache.sling.xss-2.0.14.jar (with props)
release/sling/org.apache.sling.xss-2.0.14.jar.asc
release/sling/org.apache.sling.xss-2.0.14.jar.md5
release/sling/org.apache.sling.xss-2.0.14.jar.sha1
release/sling/org.apache.sling.xss-2.0.14.pom
release/sling/org.apache.sling.xss-2.0.14.pom.asc
release/sling/org.apache.sling.xss-2.0.14.pom.md5
release/sling/org.apache.sling.xss-2.0.14.pom.sha1
Removed:
release/sling/org.apache.sling.xss-2.0.10-javadoc.jar
release/sling/org.apache.sling.xss-2.0.10-javadoc.jar.asc
release/sling/org.apache.sling.xss-2.0.10-javadoc.jar.md5
release/sling/org.apache.sling.xss-2.0.10-javadoc.jar.sha1
release/sling/org.apache.sling.xss-2.0.10-source-release.zip
release/sling/org.apache.sling.xss-2.0.10-source-release.zip.asc
release/sling/org.apache.sling.xss-2.0.10-source-release.zip.md5
release/sling/org.apache.sling.xss-2.0.10-source-release.zip.sha1
release/sling/org.apache.sling.xss-2.0.10-sources.jar
release/sling/org.apache.sling.xss-2.0.10-sources.jar.asc
release/sling/org.apache.sling.xss-2.0.10-sources.jar.md5
release/sling/org.apache.sling.xss-2.0.10-sources.jar.sha1
release/sling/org.apache.sling.xss-2.0.10.jar
release/sling/org.apache.sling.xss-2.0.10.jar.asc
release/sling/org.apache.sling.xss-2.0.10.jar.md5
release/sling/org.apache.sling.xss-2.0.10.jar.sha1
release/sling/org.apache.sling.xss-2.0.10.pom
release/sling/org.apache.sling.xss-2.0.10.pom.asc
release/sling/org.apache.sling.xss-2.0.10.pom.md5
release/sling/org.apache.sling.xss-2.0.10.pom.sha1
release/sling/org.apache.sling.xss-2.0.12-javadoc.jar
release/sling/org.apache.sling.xss-2.0.12-javadoc.jar.asc
release/sling/org.apache.sling.xss-2.0.12-javadoc.jar.md5
release/sling/org.apache.sling.xss-2.0.12-javadoc.jar.sha1
release/sling/org.apache.sling.xss-2.0.12-source-release.zip
release/sling/org.apache.sling.xss-2.0.12-source-release.zip.asc
release/sling/org.apache.sling.xss-2.0.12-source-release.zip.md5
release/sling/org.apache.sling.xss-2.0.12-source-release.zip.sha1
release/sling/org.apache.sling.xss-2.0.12-sources.jar
release/sling/org.apache.sling.xss-2.0.12-sources.jar.asc
release/sling/org.apache.sling.xss-2.0.12-sources.jar.md5
release/sling/org.apache.sling.xss-2.0.12-sources.jar.sha1
release/sling/org.apache.sling.xss-2.0.12.jar
release/sling/org.apache.sling.xss-2.0.12.jar.asc
release/sling/org.apache.sling.xss-2.0.12.jar.md5
release/sling/org.apache.sling.xss-2.0.12.jar.sha1
release/sling/org.apache.sling.xss-2.0.12.pom
release/sling/org.apache.sling.xss-2.0.12.pom.asc
release/sling/org.apache.sling.xss-2.0.12.pom.md5
release/sling/org.apache.sling.xss-2.0.12.pom.sha1
Added: release/sling/org.apache.sling.xss-2.0.14-javadoc.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.14-javadoc.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.asc Thu Jan 24 13:28:38 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=WIZL
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.md5 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+417672b40d4e0e646586c8d640049c31
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.14-javadoc.jar.sha1 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+5d0fd4654f570f982ac9a5e5c4e31eb87c281384
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14-source-release.zip
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.14-source-release.zip
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.14-source-release.zip.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-source-release.zip.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.14-source-release.zip.asc Thu Jan 24 13:28:38 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=1Mhs
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.14-source-release.zip.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-source-release.zip.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.14-source-release.zip.md5 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+f27ed2e613cd0070ff99abfc407c4387
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14-source-release.zip.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-source-release.zip.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.14-source-release.zip.sha1 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+1abcca8807f94abc230a065a30d74568101363e7
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14-sources.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.14-sources.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.14-sources.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-sources.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.14-sources.jar.asc Thu Jan 24 13:28:38 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=whpr
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.14-sources.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-sources.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.14-sources.jar.md5 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+9e59c611b497378dcb4a8dce1771fc4d
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14-sources.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14-sources.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.14-sources.jar.sha1 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+78a6926a133e230ce6f0f8151f1f4a5000b0e983
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14.jar
==============================================================================
Binary file - no diff available.
Propchange: release/sling/org.apache.sling.xss-2.0.14.jar
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: release/sling/org.apache.sling.xss-2.0.14.jar.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.jar.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.14.jar.asc Thu Jan 24 13:28:38 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=rVkG
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.14.jar.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.jar.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.14.jar.md5 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+d532dfd1af185e0caa317cd25adeddde
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14.jar.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.jar.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.14.jar.sha1 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+3a720beddba0da296e740956ee966375e41234ef
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14.pom
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.pom (added)
+++ release/sling/org.apache.sling.xss-2.0.14.pom Thu Jan 24 13:28:38 2019
@@ -0,0 +1,298 @@
+<?xml version="1.0"?>
+<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ ~ Licensed to the Apache Software Foundation (ASF) under one or
+ ~ more contributor license agreements. See the NOTICE file
+ ~ distributed with this work for additional information regarding
+ ~ copyright ownership. The ASF licenses this file to you under the
+ ~ Apache License, Version 2.0 (the "License"); you may not use
+ ~ this file except in compliance with the License. You may obtain
+ ~ a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+ ~ applicable law or agreed to in writing, software distributed
+ ~ under the License is distributed on an "AS IS" BASIS, WITHOUT
+ ~ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions
+ ~ and limitations under the License.
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <!-- ======================================================================= -->
+ <!-- P A R E N T P R O J E C T -->
+ <!-- ======================================================================= -->
+ <parent>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>sling</artifactId>
+ <version>30</version>
+ <relativePath />
+ </parent>
+
+ <!-- ======================================================================= -->
+ <!-- P R O J E C T -->
+ <!-- ======================================================================= -->
+ <artifactId>org.apache.sling.xss</artifactId>
+ <packaging>bundle</packaging>
+ <version>2.0.14</version>
+
+ <name>Apache Sling XSS Protection</name>
+ <description>
+ Apache Sling XSS Protection Bundle providing XSS protection based on the OWASP AntiSamy and OWASP Java Encoder libraries.
+ </description>
+
+ <scm>
+ <connection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</connection>
+ <developerConnection>scm:git:https://gitbox.apache.org/repos/asf/sling-org-apache-sling-xss.git</developerConnection>
+ <url>https://gitbox.apache.org/repos/asf?p=sling-org-apache-sling-xss.git</url>
+ <tag>org.apache.sling.xss-2.0.14</tag>
+ </scm>
+
+
+ <!-- ======================================================================= -->
+ <!-- B U I L D -->
+ <!-- ======================================================================= -->
+ <build>
+ <pluginManagement>
+ <plugins>
+ <plugin>
+ <!-- Extend RAT configuration from parent pom -->
+ <groupId>org.apache.rat</groupId>
+ <artifactId>apache-rat-plugin</artifactId>
+ <configuration>
+ <excludes combine.children="append">
+ <exclude>src/main/resources/ESAPI.properties</exclude>
+ <exclude>src/main/resources/validation.properties</exclude>
+ </excludes>
+ </configuration>
+ </plugin>
+ </plugins>
+ </pluginManagement>
+
+ <plugins>
+ <plugin>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>maven-sling-plugin</artifactId>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.felix</groupId>
+ <artifactId>maven-bundle-plugin</artifactId>
+ <extensions>true</extensions>
+ <configuration>
+ <instructions>
+ <Import-Package>
+ !bsh,
+ !nu.xom,
+ !org.apache.log4j.spi,
+ !org.apache.log4j.xml,
+ !org.w3c.dom.svg,
+ !org.apache.avalon.framework.logger,
+ !org.apache.commons.jxpath.*,
+ !org.apache.commons.digester.*,
+ !org.apache.tools.ant.taskdefs,
+ !org.apache.xml.resolver,
+ !org.apache.xml.resolver.readers,
+ !org.apache.xmlgraphics.java2d.color,
+ !org.apache.log,
+ !javax.mail.internet,
+ !javax.servlet.jsp,
+ !javax.servlet.jsp.tagext,
+ !sun.io,
+ *
+ </Import-Package>
+ <Private-Package>
+ org.apache.sling.xss.impl,
+ org.apache.batik.*,
+ org.w3c.css.sac,
+ org.apache.xerces.*,
+ org.apache.xml.serialize,
+ org.apache.commons.beanutils.*;-split-package:=merge-first,
+ org.apache.commons.configuration.*,
+ org.apache.commons.logging.impl,
+ org.cyberneko.html.*,
+ </Private-Package>
+ <Embed-Dependency>
+ antisamy;inline=true,
+ esapi;inline=true,
+ encoder;inline=true
+ </Embed-Dependency>
+ <Sling-Initial-Content>
+ SLING-INF/content;path:=/libs/sling/xss;overwrite:=true;ignoreImportProviders:=xml
+ </Sling-Initial-Content>
+ </instructions>
+ </configuration>
+ </plugin>
+ </plugins>
+ </build>
+
+ <!-- ======================================================================= -->
+ <!-- D E P E N D E N C I E S -->
+ <!-- ======================================================================= -->
+ <dependencies>
+ <dependency>
+ <groupId>org.owasp.antisamy</groupId>
+ <artifactId>antisamy</artifactId>
+ <version>1.5.7</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>nu.xom</groupId>
+ <artifactId>com.springsource.nu.xom</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>bsh</groupId>
+ <artifactId>bsh</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.axsl.org.w3c.dom.svg</groupId>
+ <artifactId>svg-dom-java</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>commons-jxpath</groupId>
+ <artifactId>commons-jxpath</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-digester3</artifactId>
+ </exclusion>
+ <!-- #40108 - XSS protection does not work on Java 5 -->
+ <!-- Replace batik-css 1.7 with 1.6. See below. -->
+ <exclusion>
+ <groupId>org.apache.xmlgraphics</groupId>
+ <artifactId>batik-css</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <!-- <#40108 - XSS protection does not work on Java 5> -->
+ <!-- Replace batik-css 1.7 with 1.6 to avoid breaking -->
+ <!-- the build on Java 5. The batik-css 1.6 pom doesn't -->
+ <!-- have proper dependency metadata, so we need to -->
+ <!-- reconstruct the full list here. -->
+ <!-- TODO: Remove this workaround when we dump Java 5. -->
+ <dependency>
+ <groupId>org.apache.xmlgraphics</groupId>
+ <artifactId>batik-css</artifactId>
+ <version>1.9.1</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>xml-apis</groupId>
+ <artifactId>xml-apis</artifactId>
+ <version>1.4.01</version>
+ <scope>provided</scope>
+ </dependency>
+ <!-- </#40108 - XSS protection does not work on Java 5> -->
+
+ <dependency>
+ <groupId>org.owasp.esapi</groupId>
+ <artifactId>esapi</artifactId>
+ <version>2.1.0</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>nu.xom</groupId>
+ <artifactId>com.springsource.nu.xom</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>bsh</groupId>
+ <artifactId>bsh</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.axsl.org.w3c.dom.svg</groupId>
+ <artifactId>svg-dom-java</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>commons-jxpath</groupId>
+ <artifactId>commons-jxpath</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-digester3</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+
+ <dependency>
+ <groupId>org.owasp.encoder</groupId>
+ <artifactId>encoder</artifactId>
+ <scope>provided</scope>
+ <version>1.1.1</version>
+ </dependency>
+
+ <dependency>
+ <groupId>javax.servlet</groupId>
+ <artifactId>javax.servlet-api</artifactId>
+ <scope>provided</scope>
+ </dependency>
+
+ <dependency>
+ <groupId>org.osgi</groupId>
+ <artifactId>osgi.core</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.slf4j</groupId>
+ <artifactId>slf4j-api</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.api</artifactId>
+ <version>2.11.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.serviceusermapper</artifactId>
+ <version>1.2.0</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.jetbrains</groupId>
+ <artifactId>annotations</artifactId>
+ <version>16.0.2</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.geronimo.specs</groupId>
+ <artifactId>geronimo-json_1.0_spec</artifactId>
+ <version>1.0-alpha-1</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-lang3</artifactId>
+ <version>3.6</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>junit</groupId>
+ <artifactId>junit</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.mockito</groupId>
+ <artifactId>mockito-all</artifactId>
+ <version>1.10.19</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.powermock</groupId>
+ <artifactId>powermock-api-mockito</artifactId>
+ <version>1.6.5</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.commons.johnzon</artifactId>
+ <version>1.0.0</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.slf4j</groupId>
+ <artifactId>slf4j-simple</artifactId>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.sling</groupId>
+ <artifactId>org.apache.sling.testing.sling-mock</artifactId>
+ <version>2.2.18</version>
+ <scope>test</scope>
+ </dependency>
+ </dependencies>
+
+</project>
Added: release/sling/org.apache.sling.xss-2.0.14.pom.asc
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.pom.asc (added)
+++ release/sling/org.apache.sling.xss-2.0.14.pom.asc Thu Jan 24 13:28:38 2019
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=tqKM
+-----END PGP SIGNATURE-----
Added: release/sling/org.apache.sling.xss-2.0.14.pom.md5
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.pom.md5 (added)
+++ release/sling/org.apache.sling.xss-2.0.14.pom.md5 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+435bb3531170df04743808101e65af81
\ No newline at end of file
Added: release/sling/org.apache.sling.xss-2.0.14.pom.sha1
==============================================================================
--- release/sling/org.apache.sling.xss-2.0.14.pom.sha1 (added)
+++ release/sling/org.apache.sling.xss-2.0.14.pom.sha1 Thu Jan 24 13:28:38 2019
@@ -0,0 +1 @@
+d5905da11a9732dd17f6f0c7c120d530912bccb9
\ No newline at end of file