commit	d33293a1dc826107395fd7b03b19771bd5924433	[log] [tgz]
author	Radu Cotescu <radu@apache.org>	Tue Jul 28 14:14:38 2020 +0200
committer	Radu Cotescu <radu@apache.org>	Tue Jul 28 14:14:38 2020 +0200
tree	9db97d15da659c7ee8da562f2f9fd66d9048fcf7
parent	d85845095a6f1373d3f0996667cf75566ce07f0e [diff]

SLING-9613 - java.lang.StackOverflowError in XSSFilterImpl.filter for long URLs

* added a fallback mechanism that should rerun the filtering with
simplified regular expressions for validating URLs

src/main/java/org/apache/sling/xss/impl/FallbackATag.java[Added - diff]
src/main/java/org/apache/sling/xss/impl/FallbackSlingPolicy.java[Added - diff]
src/main/java/org/apache/sling/xss/impl/HtmlToHtmlContentContext.java[diff]
src/main/java/org/apache/sling/xss/impl/PolicyHandler.java[diff]
src/main/java/org/apache/sling/xss/impl/XSSFilterImpl.java[diff]
src/test/java/org/apache/sling/xss/impl/XSSFilterImplTest.java[diff]

6 files changed

tree: 9db97d15da659c7ee8da562f2f9fd66d9048fcf7

src/
.gitignore
bnd.bnd
CODE_OF_CONDUCT.md
CONTRIBUTING.md
Jenkinsfile
LICENSE
pom.xml
README.md

README.md

Apache Sling XSS Protection

This module is part of the Apache Sling project.

The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content:

org.apache.sling.xss.XSSAPI
org.apache.sling.xss.XSSFilter

Please check the JavaDoc of each service to find out what methods they provide.