tree 6ec3a1684a063801b65231b0cfe8f0b07a562065
parent b3c8e24f036d32abcbd405a4af8e63975f601746
author Radu Cotescu <170911+raducotescu@users.noreply.github.com> 1579193458 +0100
committer GitHub <noreply@github.com> 1579193458 +0100
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJeIJRyCRBK7hj4Ov3rIwAAdHIIAEOaxKSds3nYct6XVn8Mt6JQ
 7haOkKhk3vq79xA5JZ+JsJMhLEL1xaXpUlvFLd9alYzEjshi5NrR+U9wESlHZN4Z
 BF28DpZl79gkvwUFjfo4mssDgptsF6Dbb/efQXcI27pOx/TTK2Ybr6vEx5zhaC+8
 LruaPp7El4fU6DTTeWgghKY+aeJDUor67DkyXERx0XHbvWCzjp5aCtfUufHZpAtf
 iwBjfEfMZAO17FmX44XcstSs1iftWKva0IdOpgdObJcRJgB+5ptfaeGb5uSm3vyZ
 yAplA/k2t42oc32kFsa3RaW9fAhMW+Is1UFuGULGodEFWGhuzTZ+iJ5Takp7N4A=
 =nlsH
 -----END PGP SIGNATURE-----
 

SLING-8866 - Add reporting info in the XSS Protection API bundle

* added a counter metric (sling:xss.invalid_hrefs) to track the number of invalid URLs detected by org.apache.sling.xss.XSSFilter#isValidHref
* enhanced the webconsole plugin to provide a detailed report of the blocked URLs
* allow a system administrator to download the active AntiSamy configuration
* expose JSON / XML endpoints to retrieve the current status of the XSS library / the active AntiSamy configuration