This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-engine.git
The following commit(s) were added to refs/heads/master by this push:
new d48beec Add security section to AGENTS.md
d48beec is described below
commit d48beec93176e48d80702e89b982c6ee2e5df3c1
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index 5bdde00..f27f0c5 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -99,3 +99,10 @@ target/ Build output (do not edit)
- The `org.apache.sling.engine.servlets` package baseline is temporarily
excluded (see `pom.xml` `<diffpackages>`) due to SLING-11728.
- `javax.servlet` imports in `bnd.bnd` use a version range `[2.6,4)` to stay
compatible with both Servlet 3.x containers and the wrappers provided by
`org.apache.felix.http.wrappers`.
- The `SlingMainServlet` registers as an OSGi HTTP Whiteboard servlet — it is
not instantiated by a traditional servlet container; test it with OSGi Mock,
not a servlet container mock.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
