Hi, What do people think about applying the SLING-3203 patch?
It causes the POST servlet to reject any :delete operation that has a selector, extension or suffix - might cause some backward incompatible behavior but the current behavior feels wrong to me. The patch returns a status 400 when rejecting the request, we'd change that to 404 as discussed there. WDYT? -Bertrand