sling-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Carsten Ziegeler (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SLING-8266) Stop embedding ESAPI
Date Sat, 09 Feb 2019 06:40:00 GMT

    [ https://issues.apache.org/jira/browse/SLING-8266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16764080#comment-16764080
] 

Carsten Ziegeler commented on SLING-8266:
-----------------------------------------

[~rombert] This is a half duplicate of SLING-8019, would be great if the other part mentioned
in that issue is taken care of as well

> Stop embedding ESAPI
> --------------------
>
>                 Key: SLING-8266
>                 URL: https://issues.apache.org/jira/browse/SLING-8266
>             Project: Sling
>          Issue Type: Improvement
>          Components: Scripting
>            Reporter: Robert Munteanu
>            Priority: Major
>             Fix For: Scripting JSP Taglib 2.3.2
>
>          Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> Since we now have an XSS API in Sling we should use this instead of embedding the ESAPI
jars, since:
> - bundle size will be reduced
> - possibility to embed an out-of-date version is removed



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message