[SLING-8353] Change embedded ESAPI version in sling.xss

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: XSS Protection API 2.1.6
• Fix Version/s: XSS Protection API 2.1.8
• Component/s: XSS Protection API
• Assignee: Radu Cotescu
• Reporter: Ashok Kumar
• Created: 15/Apr/19 11:16
• Updated: 27/May/19 16:16
• Resolved: 18/Apr/19 16:33

Description

org.apache.sling.xss embeds esapi 2.1.0. It would be good if we update this to 2.1.0.1 atleast, which would bring more security fixes and still remains backward compatible.

Issue Links

• links to: GitHub Pull Request #6