dev  

Messages by Date

• 2026/09/24 [jira] [Created] (SLING-13363) Open-redirect hardening gaps in post-login redirect  parameter handling (Sling OAuth Client) — defense-in-depth Nicola Scendoni (Jira)
• 2026/09/24 [jira] [Resolved] (SLING-13362) Fix parameter parsing Joerg Hoh (Jira)
• 2026/09/24 Re: [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13282 Support automatic decryption in Context-Aware Configurations [sling-org-apache-sling-caconfig-impl] via GitHub
• 2026/09/24 [jira] [Created] (SLING-13364) Throw a statuscode 400 when failing the parameter parsing Joerg Hoh (Jira)
• 2026/09/24 [jira] [Commented] (SLING-13363) Open-redirect hardening gaps in post-login redirect  parameter handling (Sling OAuth Client) — defense-in-depth Nicola Scendoni (Jira)
• 2026/09/24 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/24 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/24 Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/24 [jira] [Resolved] (SLING-13357) Implement header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• 2026/09/24 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 [jira] [Resolved] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID Joerg Hoh (Jira)
• 2026/09/24 Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
• 2026/09/24 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 Re: [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 [jira] [Created] (SLING-13362) Fix parameter parsing Joerg Hoh (Jira)
• 2026/09/23 [PR] SLING-13362 fix parameter parsing [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 Re: [PR] SLING-13202 Remove dependency on commons-fileupload [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 [jira] [Resolved] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter Joerg Hoh (Jira)
• 2026/09/23 Re: [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 Re: [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 [jira] [Resolved] (SLING-13360) all log directives should handle CR/LF escaping Joerg Hoh (Jira)
• 2026/09/23 Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• 2026/09/23 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/23 Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/22 Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/22 Re: [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 [PR] SLING-13361 escape data for the RequestProgressTrackerLogFilter [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 [jira] [Created] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter Joerg Hoh (Jira)
• 2026/09/22 [jira] [Assigned] (SLING-13361) escape data passed to the RequestProgressTrackerLogFilter Joerg Hoh (Jira)
• 2026/09/22 [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13359 getRequestedSessionId should return the session ID presen… [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 [jira] [Assigned] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID Joerg Hoh (Jira)
• 2026/09/22 Re: [PR] SLING-13358 include protections should be re-configurable [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 [PR] SLING-13360 all log directives should handle CR/LF escaping [sling-org-apache-sling-engine] via GitHub
• 2026/09/22 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2568 is FIXED Apache Jenkins Server
• 2026/09/22 [jira] [Created] (SLING-13360) all log directives should handle CR/LF escaping Joerg Hoh (Jira)
• 2026/09/22 [jira] [Created] (SLING-13359) SlongServletRequestAdapter.GetRequestedSessionId returns the server-side Session ID Joerg Hoh (Jira)
• 2026/09/22 [jira] [Resolved] (SLING-13358) Include warnings/protection cannot be changed on runtime Joerg Hoh (Jira)
• 2026/09/22 [jira] [Assigned] (SLING-13358) Include warnings/protection cannot be changed on runtime Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] SLING-13358 include protections should be re-configurable [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [PR] SLING-13358 include protections should be re-configurable" [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [jira] [Created] (SLING-13358) Include warnings/protection cannot be changed on runtime Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [jira] [Resolved] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• 2026/09/21 [jira] [Updated] (SLING-13357) Implement header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [PR] SLING-13357 add header-modification validation for SetCharacterEncoding [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [jira] [Updated] (SLING-13357) Implement header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [jira] [Created] (SLING-13357) Improve header-modification validation for setCharacterEncoding Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [jira] [Resolved] (SLING-13343) Missing escaping in EncryptWebConsolePlugin Konrad Windszus (Jira)
• 2026/09/21 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 Re: [PR] SLING-13344 Provider PasswordProvider based on OSGi configuration values [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 [jira] [Resolved] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 Re: [PR] SLING-13343 Escape dynamic values in Web Console plugin [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 Re: [PR] SLING-13280 Allow deferring registration of crypto service until a given [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 Re: [PR] Remove quotes from OSGi config names [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/21 [jira] [Resolved] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/21 Re: [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 Re: [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
• 2026/09/21 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2567 is BROKEN Apache Jenkins Server
• 2026/09/20 Re: [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
• 2026/09/20 Re: [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
• 2026/09/20 [jira] [Created] (SLING-13356) ResourceDistributionPackageCleanup deletes all disposable packages in a single unbounded JCR commit Christian Schneider (Jira)
• 2026/09/20 [PR] SLING-13356 - Batch disposable package deletions in ResourceDistributionPackageCleanup [sling-org-apache-sling-distribution-core] via GitHub
• 2026/09/19 Re: [PR] chore(deps): update dependency java-jdk to v17.0.20+101 - autoclosed [sling-org-apache-sling-starter] via GitHub
• 2026/09/19 [PR] chore(deps): update dependency org.apache.sling:org.apache.sling.xss to v2.4.12 [sling-org-apache-sling-starter] via GitHub
• 2026/09/18 [jira] [Closed] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• 2026/09/18 [jira] [Resolved] (SLING-13113) xss: update of esapi dependency causes unresolved logging dependency in starter Eric Norman (Jira)
• 2026/09/18 [jira] [Commented] (SLING-13282) Support automatic decryption in Context-Aware Configurations Konrad Windszus (Jira)
• 2026/09/18 [jira] [Comment Edited] (SLING-13282) Support automatic decryption in Context-Aware Configurations Konrad Windszus (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Created] (SLING-13355) Make request error handlign aware of content-types Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/18 [jira] [Commented] (SLING-13329) Cap Distribution Queue status count at 1,000 items to keep large-queue UI responsive Aamir bhat (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/18 [jira] [Updated] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13346) Downgrade slf4j dependency to 1.7 Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/18 [RESULT] [VOTE] Release Apache Sling XSS Protection API 2.4.12 Joerg Hoh
• 2026/09/18 [jira] [Closed] (SLING-13313) Improve javascript scheme detection in XSSAPI.getValidHref() Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13333) Fix potential HTML sanitization weakness in fallback error-handling path Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/18 [jira] [Closed] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)
• 2026/09/17 Re: [PR] fix(auth): prevent open redirect and log injection in feedback handlers [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [jira] [Resolved] (SLING-13331) Build with Tycho 5.x Robert Munteanu (Jira)
• 2026/09/17 Re: [PR] SLING-13331 - Debug build with Java 21 [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13332 - Set build qualifiers based on git HEAD commit for nightly builds [sling-ide-tooling] via GitHub
• 2026/09/17 [jira] [Resolved] (SLING-13332) Set build qualifiers based on git HEAD commit for nightly builds Robert Munteanu (Jira)
• 2026/09/17 Re: [PR] SLING-13330 - FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path [sling-ide-tooling] via GitHub
• 2026/09/17 [jira] [Resolved] (SLING-13330) FeatureModelContentProvider can throw exceptions if a feature project does not have a feature model path Robert Munteanu (Jira)
• 2026/09/17 Re: [PR] SLING-13331 - Debug build with Java 21 [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/17 [jira] [Commented] (SLING-13282) Support automatic decryption in Context-Aware Configurations Stefan Seifert (Jira)
• 2026/09/17 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13331 - Build with Tycho 5.x [sling-ide-tooling] via GitHub
• 2026/09/17 Re: [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [PR] SLING-13353 : prevent unbounded handleLoginFailure/getAnonymousResolver recursion on repeated anonymous login failure [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/17 [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/17 [jira] [Updated] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/17 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2563 is FIXED Apache Jenkins Server
• 2026/09/17 [jira] [Created] (SLING-13354) StreamRenderer: Fix content-type when rendering an index file Joerg Hoh (Jira)
• 2026/09/17 Re: [PR] SLING-13257: Improve Test Coverage [sling-org-apache-sling-auth-core] via GitHub
• 2026/09/17 [jira] [Created] (SLING-13353) SlingAuthenticator: unbounded handleLoginFailure <-> getAnonymousResolver recursion when anonymous login repeatedly fails Rishabh Daim (Jira)
• 2026/09/16 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/16 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2562 is BROKEN Apache Jenkins Server
• 2026/09/16 Re: [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Created] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/16 Re: [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [PR] SLING-13352 support log/fail also for newer Servlet Versions [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Assigned] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• 2026/09/16 [jira] [Created] (SLING-13352) Implement header-modification validation for newer Servlet methods Joerg Hoh (Jira)
• 2026/09/16 [PR] SLING-13351 make content-type handling consistent [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Created] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• 2026/09/16 [jira] [Assigned] (SLING-13351) Header-modification on include: addHeader/setHeader can set the content-type Joerg Hoh (Jira)
• 2026/09/16 Re: [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [PR] SLING-13350 subsequent call of header-modifying operations must be lo… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Assigned] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13350) Second call of a header-modifying operations in include is successful Joerg Hoh (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include Carsten Ziegeler (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13349) Correctly handle response header modifying operations during include Carsten Ziegeler (Jira)
• 2026/09/16 [jira] [Resolved] (SLING-13345) Improve logging for response header changing requests Joerg Hoh (Jira)
• 2026/09/16 Re: [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 Re: [PR] SLING-13345 remove noisy statements from RequestProgressTracker in th… [sling-org-apache-sling-engine] via GitHub
• 2026/09/16 [jira] [Created] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• 2026/09/16 [jira] [Updated] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• 2026/09/16 [jira] [Assigned] (SLING-13349) response header modifying operations should throw an exception if used during include Joerg Hoh (Jira)
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Carsten Ziegeler
• 2026/09/15 [jira] [Commented] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Konrad Windszus (Jira)
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Eric Norman
• 2026/09/15 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Jörg Hoh
• 2026/09/15 [jira] [Updated] (SLING-13337) Support JSON comments if Johnzon is used as JSON parser Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 [jira] [Commented] (SLING-13337) Switch testing to use Johnzon Joerg Hoh (Jira)
• 2026/09/15 Re: [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 [PR] Improve clearing passwords after use [sling-org-apache-sling-commons-crypto] via GitHub
• 2026/09/15 Re: [PR] SLING-13346 downgrade slf4j dependency to 1.7 [sling-org-apache-sling-xss] via GitHub
• 2026/09/15 [jira] [Created] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• 2026/09/15 RE: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Stefan Seifert
• 2026/09/15 [jira] [Commented] (SLING-13337) Switch testing to use Johnzon Stefan Seifert (Jira)
• 2026/09/15 [jira] [Assigned] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• 2026/09/15 [jira] [Created] (SLING-13348) Committer CLI should have a version command Joerg Hoh (Jira)
• 2026/09/15 [jira] [Assigned] (SLING-13348) Committer CLI should have a version command Joerg Hoh (Jira)
• 2026/09/15 [jira] [Updated] (SLING-13347) Committer CLI: improve handling of github ratelimiting Joerg Hoh (Jira)
• 2026/09/15 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2561 is FIXED Apache Jenkins Server
• 2026/09/15 Re: [PR] chore(deps): update dependency com.h2database:h2-mvstore to v2.5.250 [sling-org-apache-sling-starter] via GitHub
• 2026/09/15 [Jenkins] Sling » Modules » sling-org-apache-sling-starter » master #2560 is BROKEN Apache Jenkins Server
• 2026/09/15 [PR] chore(deps): update dependency java-jdk to v17.0.20+101 [sling-org-apache-sling-starter] via GitHub
• 2026/09/15 Re: [PR] chore(deps): update mongo-java-driver monorepo to v5.6.1 - abandoned [sling-org-apache-sling-starter] via GitHub
• 2026/09/15 Re: Re: A home for RFC 9651 (Structured Field Values) in Sling? Robert Munteanu
• 2026/09/15 [jira] [Created] (SLING-13346) Downgrad slf4j dependency to 1.x Joerg Hoh (Jira)
• 2026/09/15 Re: [PR] SLING-13329 : Distribution Queue UI Solution Approach [sling-org-apache-sling-distribution-core] via GitHub
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Konrad Windszus
• 2026/09/15 [jira] [Updated] (SLING-13346) Downgrade slf4j dependency to 1.7 Konrad Windszus (Jira)
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Robert Munteanu
• 2026/09/15 Re: [VOTE] Release Apache Sling XSS Protection API 2.4.12 Jörg Hoh
• 2026/09/15 [jira] [Resolved] (SLING-13338) Validation-check API did not reflect certain sanitization outcomes Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13339) Sanitizer policy reload failure could leave sanitizer in a degraded state Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13335) Insufficient output encoding in Webconsole plugin Joerg Hoh (Jira)
• 2026/09/15 [VOTE] Release Apache Sling XSS Protection API 2.4.12 Joerg Hoh
• 2026/09/15 [jira] [Resolved] (SLING-13334) Fix input validation gaps Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13346) Downgrad slf4j dependency to 1.7 Joerg Hoh (Jira)
• 2026/09/15 [jira] [Resolved] (SLING-13336) Missing resource limits in XML/JSON validation Joerg Hoh (Jira)

• Earlier messages