This is an automated email from the ASF dual-hosted git repository. jsedding pushed a commit to branch resolver-2.x-backports in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-servlets-resolver.git
commit ec5553a2897fc47f9a9e9fd32eee914fc952ed48 Author: Robert Munteanu <[email protected]> AuthorDate: Tue Jun 2 12:47:58 2026 +0200 Add security section to AGENTS.md (cherry picked from commit 51aba7024ea674b42e9f5b7c48a51172fe63c227) --- AGENTS.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/AGENTS.md b/AGENTS.md index 4eaedb7..42c98b1 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -99,3 +99,10 @@ target/ Build output — do not edit - **OSGi baseline check:** Adding or changing exported types without bumping the package version causes a build failure. Run `mvn verify` to catch this early. - **Pax Exam memory:** The forked OSGi container starts with `-Xmx512M` by default. Override with `-Dpax.vm.options` if tests OOM. - **`ResolutionCache`** is a required OSGi service dependency of `SlingServletResolver`. In tests that mock the resolver, this must be provided or the component will not activate. + +# Security + +<!-- sling-security-default:start --> +The threat model for this project is https://github.com/apache/sling/blob/master/docs/threat-model.md . +<!-- sling-security-default:end --> +
