[
https://issues.apache.org/jira/browse/SLING-12324?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Carsten Ziegeler updated SLING-12324:
-------------------------------------
Fix Version/s: (was: Security 1.2.2)
> Referrer Filter Reference Policy Should be Dynamic
> --------------------------------------------------
>
> Key: SLING-12324
> URL: https://issues.apache.org/jira/browse/SLING-12324
> Project: Sling
> Issue Type: Improvement
> Components: Sling Security
> Affects Versions: Security 1.2.0
> Reporter: Dan Klco
> Priority: Major
>
> The Reference Policy for amendments to the ReferrerFilter:
> [https://github.com/apache/sling-org-apache-sling-security/blob/master/src/main/java/org/apache/sling/security/impl/ReferrerFilter.java#L283C39-L283C60]
> are set to
> {{policyOption = ReferencePolicyOption.GREEDY, cardinality =
> ReferenceCardinality.MULTIPLE}} so they will pick up multiple amendments if
> available at initialization, however because the ReferencePolicy is still
> static, new amendments available after the component initializes will not be
> detected.
>
> To support this, the ReferencePolicy should be set to Dynamic. This will also
> require changing from constructor based parameters to bind parameters.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
