Am 13.02.2026 um 12:55 schrieb Julian Reschke:
Am 12.02.2026 um 08:07 schrieb Carsten Ziegeler:
It seems the problem is the embedded commons.logging, this patch
should fix it:
diff --git a/pom.xml b/pom.xml
index 2aed779..c0cfc3c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -98,6 +98,10 @@
<groupId>xml-apis</groupId>
<artifactId>xml-apis</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>commons-logging</groupId>
+ <artifactId>commons-logging</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
@@ -110,6 +114,10 @@
<groupId>xml-apis</groupId>
<artifactId>xml-apis-ext</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>commons-logging</groupId>
+ <artifactId>commons-logging</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
Carsten
...
Yes.
It *seems* that only the first exclusion is needed (for starter); should
I do both?
Best regards, Julian
-> https://github.com/apache/sling-org-apache-sling-xss/pull/62
Best regards, Julian
