This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-servlets-resolver.git
The following commit(s) were added to refs/heads/master by this push:
new 51aba70 Add security section to AGENTS.md
51aba70 is described below
commit 51aba7024ea674b42e9f5b7c48a51172fe63c227
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index 4eaedb7..42c98b1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -99,3 +99,10 @@ target/ Build output —
do not edit
- **OSGi baseline check:** Adding or changing exported types without bumping
the package version causes a build failure. Run `mvn verify` to catch this
early.
- **Pax Exam memory:** The forked OSGi container starts with `-Xmx512M` by
default. Override with `-Dpax.vm.options` if tests OOM.
- **`ResolutionCache`** is a required OSGi service dependency of
`SlingServletResolver`. In tests that mock the resolver, this must be provided
or the component will not activate.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
