dev  

Messages by Date

• 2026/09/18 [jira] [Closed] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• 2026/09/18 [jira] [Resolved] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• 2026/09/18 [jira] [Commented] (SLING-13282) Support automatic decryption in Context-Aware Configurations Konrad Windszus (Jira)
• 2026/09/18 [jira] [Comment Edited] (SLING-13282) Support automatic decryption in Context-Aware Configurations Konrad Windszus (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Created] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/18 [jira] [Commented] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive Aamir bhat (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13346) Downgrade slf4j dependency to 1.7 Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/18 [RESULT] [VOTE] Release Apache Sling XSS Protection API 2.4.12 Joerg Hoh
• 2026/09/18 [jira] [Closed] (SLING-13313) Improve javascript scheme detection in XSSAPI.getValidHref() Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/17 Re: [PR] fix(auth): prevent open redirect and log injection in feedback handlers [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [jira] [Resolved] (SLING-13331) Build with Tycho 5.x Robert Munteanu (Jira)
• 2026/09/17 Re: [PR] SLING-13331 - Debug build with Java 21 [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13332 - Set build qualifiers based on git HEAD commit for nightly builds [sling-ide-tooling] via GitHub
• 2026/09/17 [jira] [Resolved] (SLING-13332) Set build qualifiers based on git HEAD commit for nightly builds Robert Munteanu (Jira)
• 2026/09/17 Re: [PR] SLING-13330 - FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path [sling-ide-tooling] via GitHub
• 2026/09/17 [jira] [Resolved] (SLING-13330) FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path Robert Munteanu (Jira)
• 2026/09/17 Re: [PR] SLING-13331 - Debug build with Java 21 [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/17 [jira] [Commented] (SLING-13282) Support automatic decryption in Context-Aware Configurations Stefan Seifert (Jira)
• 2026/09/17 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/17 [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/17 [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/17 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2563 is FIXED Apache Jenkins Server
• 2026/09/17 [jira] [Created] (SLING-13354) StreamRenderer: Fix content-type when rendering an index file Joerg Hoh (Jira)
• 2026/09/17 Re: [PR] SLING-13257: Improve Test Coverage [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [jira] [Created] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/16 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/16 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2562 is BROKEN Apache Jenkins Server
• 2026/09/16 Re: [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Created] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/16 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Assigned] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• 2026/09/16 [jira] [Created] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• 2026/09/16 [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Created] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• 2026/09/16 [jira] [Assigned] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• 2026/09/16 Re: [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Assigned] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include Carsten Ziegeler (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include Carsten Ziegeler (Jira)
• 2026/09/16 [jira] [Resolved] (SLING-13345) Improve logging for response header changing requests Joerg Hoh (Jira)
• 2026/09/16 Re: [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 Re: [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Created] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• 2026/09/16 [jira] [Assigned] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Carsten Ziegeler
• 2026/09/15 [jira] [Commented] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Konrad Windszus (Jira)
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Eric Norman
• 2026/09/15 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Jörg Hoh
• 2026/09/15 [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 [jira] [Commented] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 Re: [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
• 2026/09/15 [jira] [Created] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• 2026/09/15 RE: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Stefan Seifert
• 2026/09/15 [jira] [Commented] (SLING-13337) Switch testing to use Johnzon Stefan Seifert (Jira)
• 2026/09/15 [jira] [Assigned] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• 2026/09/15 [jira] [Created] (SLING-13348) Committer CLI should have a version command Joerg Hoh (Jira)
• 2026/09/15 [jira] [Assigned] (SLING-13348) Committer CLI should have a version command Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• 2026/09/15 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2561 is FIXED Apache Jenkins Server
• 2026/09/15 Re: [PR] chore(deps): update dependency com.h2database:h2-mvstore to v2.5.250 [sling-org-apache-sling-starter] via GitHub
• 2026/09/15 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2560 is BROKEN Apache Jenkins Server
• 2026/09/15 [PR] chore(deps): update dependency java-jdk to v17.0.20+101 [sling-org-apache-sling-starter] via GitHub
• 2026/09/15 Re: [PR] chore(deps): update mongo-java-driver monorepo to v5.6.1 - abandoned [sling-org-apache-sling-starter] via GitHub
• 2026/09/15 Re: Re: A home for RFC 9651 (Structured Field Values) in Sling? Robert Munteanu
• 2026/09/15 [jira] [Created] (SLING-13346) Downgrad slf4j dependency to 1.x Joerg Hoh (Jira)
• 2026/09/15 Re: [PR] SLING-13329 : Distribution Queue UI Solution Approach [sling-org-apache-sling-distribution-core] via GitHub
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Konrad Windszus
• 2026/09/15 [jira] [Updated] (SLING-13346) Downgrade slf4j dependency to 1.7 Konrad Windszus (Jira)
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Robert Munteanu
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Jörg Hoh
• 2026/09/15 [jira] [Resolved] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/15 [VOTE] Release Apache Sling XSS Protection API 2.4.12 Joerg Hoh
• 2026/09/15 [jira] [Resolved] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
• 2026/09/15 [jira] [Resolved] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/15 Re: [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
• 2026/09/15 [jira] [Assigned] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• 2026/09/15 Re: [PR] SLING-13329 : Distribution Queue UI Solution Approach [sling-org-apache-sling-distribution-core] via GitHub
• 2026/09/15 [jira] [Commented] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive Joerg Hoh (Jira)
• 2026/09/14 [jira] [Commented] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive Aamir bhat (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/14 [jira] [Updated] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x Konrad Windszus (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/14 [jira] [Assigned] (SLING-13345) Improve logging for response header changing requests Joerg Hoh (Jira)
• 2026/09/14 Re: [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] via GitHub
• 2026/09/14 [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] via GitHub
• 2026/09/14 [jira] [Created] (SLING-13345) Improve logging for response header changing requests Joerg Hoh (Jira)
• 2026/09/14 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2559 is FIXED Apache Jenkins Server
• 2026/09/14 [jira] [Comment Edited] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x Konrad Windszus (Jira)
• 2026/09/14 [jira] [Commented] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x Konrad Windszus (Jira)
• 2026/09/14 Re: [PR] SLING-13343 Escape dynamic values in Web Console plugin [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/14 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/14 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/13 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 Re: [PR] SLING-13280 Allow deferring registration of crypto service until a given [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Assigned] (SLING-13344) Provide PasswordProvider based on OSGi configuration properties Konrad Windszus (Jira)
• 2026/09/13 [jira] [Created] (SLING-13344) Provide PasswordProvider based on OSGi configuration properties Konrad Windszus (Jira)
• 2026/09/13 Re: [PR] SLING-13282 Add encrypted flag to PropertyMetadata [sling-org-apache-sling-caconfig-spi] via GitHub
• 2026/09/13 Re: [PR] SLING-13282 Add encrypted element to Property annotation [sling-org-apache-sling-caconfig-api] via GitHub
• 2026/09/13 Re: [PR] Remove quotes from OSGi config names [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Comment Edited] (SLING-13280) Provide a CryptoService implementation just relying on JCA Konrad Windszus (Jira)
• 2026/09/13 [PR] Remove quotes from OSGi config names [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 Re: [PR] SLING-13280 Allow deferring registration of crypto service until a given [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [PR] SLING-13280 Allow deferring registration of crypto service until a given [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Commented] (SLING-13280) Provide a CryptoService implementation just relying on JCA Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13343) Missing escaping in Konrad Windszus (Jira)
• 2026/09/13 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2558 is BROKEN Apache Jenkins Server
• 2026/09/13 [jira] [Updated] (SLING-13341) Use salt length of 16 byte (128 bit) by default Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13341) Use salt length of 16 byte (128 bit) by default Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13343) Missing escaping in Konrad Windszus (Jira)
• 2026/09/13 Re: [PR] SLING-13343 Escape dynamic values in Web Console plugin [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [PR] SLING-13343 Escape dynamic values in Web Console pluginn [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Assigned] (SLING-13343) Missing escaping in EncryptWebConsolePlugin Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13343) Missing escaping in EncryptWebConsolePlugin Konrad Windszus (Jira)
• 2026/09/13 [jira] [Created] (SLING-13343) Missing HTML Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13343) Missing escaping in EncryptWebConsolePlugin Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13343) Missing escaping in Konrad Windszus (Jira)
• 2026/09/13 [jira] [Resolved] (SLING-13279) Commons Crypto Web Console should reuse category "Sling" Konrad Windszus (Jira)
• 2026/09/13 Re: [PR] SLING-13279 Update web console plugin category from 'Crypto' to 'Sling' [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 Re: [PR] SLING-13282 Add encrypted flag to PropertyMetadata [sling-org-apache-sling-caconfig-spi] via GitHub
• 2026/09/13 [jira] [Resolved] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x Konrad Windszus (Jira)
• 2026/09/13 [jira] [Created] (SLING-13340) Do no longer use java.security.Provider OSGi service in JasyptStandardPbeStringCryptoService Konrad Windszus (Jira)
• 2026/09/13 [jira] [Updated] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x Konrad Windszus (Jira)
• 2026/09/13 Re: [PR] SLING-13279 Update web console plugin category from 'Crypto' to 'Sling' [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Created] (SLING-13342) CAConfig: Downgrade SLF4J API package versions to 1.7.x Konrad Windszus (Jira)
• 2026/09/13 Re: [PR] SLING-13318 Deprecate Jasypt implementation [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Resolved] (SLING-13318) Deprecate Jasypt based crypto implementation Konrad Windszus (Jira)
• 2026/09/13 [jira] [Resolved] (SLING-13341) Use salt length of 16 byte (128 bit) by default Konrad Windszus (Jira)
• 2026/09/13 [jira] [Created] (SLING-13341) Use salt length of 16 byte (128 bit) by default Konrad Windszus (Jira)
• 2026/09/13 [jira] [Assigned] (SLING-13341) Use salt length of 16 byte (128 bit) by default Konrad Windszus (Jira)
• 2026/09/13 [jira] [Comment Edited] (SLING-13280) Provide a CryptoService implementation just relying on JCA Konrad Windszus (Jira)
• 2026/09/13 [jira] [Resolved] (SLING-13340) Do no longer use java.security.Provider OSGi service in JasyptStandardPbeStringCryptoService Konrad Windszus (Jira)
• 2026/09/13 [jira] [Commented] (SLING-13280) Provide a CryptoService implementation just relying on JCA Konrad Windszus (Jira)
• 2026/09/13 [jira] [Assigned] (SLING-13340) Do no longer use java.security.Provider OSGi service in JasyptStandardPbeStringCryptoService Konrad Windszus (Jira)
• 2026/09/13 Re: [PR] Do no longer preferably use the first Provider exposed via OSGi service [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/13 [jira] [Resolved] (SLING-13280) Provide a CryptoService implementation just relying on JCA Konrad Windszus (Jira)
• 2026/09/11 [jira] [Created] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/11 [jira] [Created] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/11 [jira] [Created] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/11 [PR] Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2 [sling-site] via GitHub
• 2026/09/11 [jira] [Created] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/11 [jira] [Created] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)

• Earlier messages