OWASP has some security-related modules which would be great to incorporate into CloudStack:
https://www.owasp.org/index.php/OWASP_Java_Encoder_Project https://www.owasp.org/index.php/OWASP_JSON_Sanitizer These are BSD licensed. What is the process for bundling them into CloudStack? Legal review, etc.?