Re: Vulnerable artifact referenced in a few sling's pom.xml files.

2014-04-02 Thread Chetan Mehrotra
Thanks Jose for doing a review. In most cases the commons-upload is used for integration testing (at least for script-console and log). And in other cases the dependency is set to provided scope. So the older version is not used at runtime and hence should not be an issue The important place to l

[jira] [Resolved] (SLING-3376) TenantProvider passes tenant with old state to TenantCustomizer

2014-04-02 Thread Amit Gupta (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Amit Gupta resolved SLING-3376. --- Resolution: Fixed Fix Version/s: Tenant 1.0.2 Closing applied the patch already. > TenantProv

Re: Sling-related conferences: AEMHub (April), Circuit (June)

2014-04-02 Thread Andrew Savory
Hi all, A quick reminder that AEM Hub is taking place next week on Wednesday 9th and Thursday 10th. There will be a bunch of Apache folk attending, as well as a number of Sling-related talks. This is your last chance to sign up ... see http://aemhub.cognifide.com/ for more information. Look forwa

Vulnerable artifact referenced in a few sling's pom.xml files.

2014-04-02 Thread Jose Insua Fernandez
Hello everyone, I've been checking the usage of the commons-fileupload component because versions previous to 1.3.1 have a security issue (CVE-2014-0050) I see it referenced in the following pom.xml files: /sling/tooling/support/install/pom.xml has version number 1.2.2 /sling/contrib/scripting/

Re: [VOTE] Release Apache Sling discovery.impl 1.0.6

2014-04-02 Thread Justin Edelson
+1 On Wed, Apr 2, 2014 at 3:32 AM, Stefan Egli wrote: > anyone? > > Cheers, > Stefan > > On 3/31/14 9:37 PM, "Stefan Egli" wrote: > >>ping, 1 binding vote is missing here. >> >>Thanks, >>Cheers, >>Stefan >> >>On 3/27/14 4:33 PM, "Stefan Egli" wrote: >> >>>Hi, >>> >>>We solved 1 issue in this re

Re: ResourceResolver.map() always adds the context path

2014-04-02 Thread Carsten Ziegeler
Hi Justin, ah right - got it. Yes, I wasn't thinking that case through...so it seems your suggestion is better than :) Regards Carsten 2014-04-02 14:51 GMT+02:00 Justin Edelson : > Hi Carsten, > Just curious - why do you prefer to remove the context path from the > *result* of ResourceResolver

Re: ResourceResolver.map() always adds the context path

2014-04-02 Thread Justin Edelson
Hi Carsten, Just curious - why do you prefer to remove the context path from the *result* of ResourceResolver.map() rather than removing it from the path passed *to* ResourceResolver.map()? Since ResourceResolver.map() does a resolve() call, it seems to make more sense to me that the path passed i

[jira] [Commented] (SLING-3485) Expose JSON Servlet Helpers

2014-04-02 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13957606#comment-13957606 ] Carsten Ziegeler commented on SLING-3485: - Yes, a dynamic import for that package

[jira] [Commented] (SLING-3485) Expose JSON Servlet Helpers

2014-04-02 Thread Justin Edelson (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13957584#comment-13957584 ] Justin Edelson commented on SLING-3485: --- Couldn't commons.json have an optional impo

[jira] [Commented] (SLING-3487) Resource added events missing when using new OakResourceListener

2014-04-02 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-3487?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13957551#comment-13957551 ] Michael Dürig commented on SLING-3487: -- I think in the {{JcrResourceListener}} case t

Re: [VOTE] Release Apache Sling

2014-04-02 Thread Ian Boston
+1 Apologies for the very late vote, work is consuming every waking hour. On 21 March 2014 00:42, Justin Edelson wrote: > FYI - vote email is Missing JIRA link: > https://issues.apache.org/jira/browse/SLING/fixforversion/12326520/ > > +1 > > On Thu, Mar 20, 2014 at 8:29 PM, Carsten Ziegeler > w

[jira] [Commented] (SLING-3487) Resource added events missing when using new OakResourceListener

2014-04-02 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3487?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13957533#comment-13957533 ] Carsten Ziegeler commented on SLING-3487: - I made a modification to the patch whic

Re: Five Outstanding Votes

2014-04-02 Thread Carsten Ziegeler
Just a gentle reminder that we still have outstanding votes Thanks 2014-03-30 17:04 GMT+02:00 Carsten Ziegeler : > Hi, > > we have currently five votes open, most of them are open for nearly a week > now and we're (again) still missing binding votes. > > Please vote > > Thanks > Carsten > -- >

[jira] [Resolved] (SLING-3487) Resource added events missing when using new OakResourceListener

2014-04-02 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-3487?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Dürig resolved SLING-3487. -- Resolution: Fixed Fix Version/s: JCR Resource 2.3.8 Fixed at http://svn.apache.org/r1583

[jira] [Assigned] (SLING-3487) Resource added events missing when using new OakResourceListener

2014-04-02 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-3487?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Dürig reassigned SLING-3487: Assignee: Michael Dürig > Resource added events missing when using new OakResourceListener

[jira] [Updated] (SLING-3487) Resource added events missing when using new OakResourceListener

2014-04-02 Thread Marc Pfaff (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3487?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Marc Pfaff updated SLING-3487: -- Attachment: SLING-3487.patch Attaching patch with added resolver refresh. > Resource added events miss

[jira] [Created] (SLING-3487) Resource added events missing when using new OakResourceListener

2014-04-02 Thread Marc Pfaff (JIRA)
Marc Pfaff created SLING-3487: - Summary: Resource added events missing when using new OakResourceListener Key: SLING-3487 URL: https://issues.apache.org/jira/browse/SLING-3487 Project: Sling Iss

Re: [VOTE] Release Apache Sling discovery.impl 1.0.6

2014-04-02 Thread Stefan Egli
anyone? Cheers, Stefan On 3/31/14 9:37 PM, "Stefan Egli" wrote: >ping, 1 binding vote is missing here. > >Thanks, >Cheers, >Stefan > >On 3/27/14 4:33 PM, "Stefan Egli" wrote: > >>Hi, >> >>We solved 1 issue in this release: >>https://issues.apache.org/jira/browse/SLING/fixforversion/12326448 >>

[jira] [Resolved] (SLING-3480) Adding test for replication config delete

2014-04-02 Thread Tommaso Teofili (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3480?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tommaso Teofili resolved SLING-3480. Resolution: Fixed added missing files in r1583924 and adjusted ITs in r1583925 > Adding te

[jira] [Reopened] (SLING-3480) Adding test for replication config delete

2014-04-02 Thread Tommaso Teofili (JIRA)
[ https://issues.apache.org/jira/browse/SLING-3480?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tommaso Teofili reopened SLING-3480: missed to commit some changes also to replication.core > Adding test for replication config de