src/main/resources/org.apache.sling.jcr.repoinit.RepositoryInitializer-sling_xss.config

scripts=[\
  "create service user sling-xss\n\
  create path (sling:Folder) /apps/sling/xss\n\
  create path (sling:Folder) /libs/sling/xss\n\
  set ACL for sling-xss\n\
    allow   jcr:read    on /apps/sling/xss\n\
    allow   jcr:read    on /libs/sling/xss\n\
  end"\
]