[SLING-8857] Lower the log level for validation errors in org.apache.sling.xss.impl.XSSFilterImpl#runHrefValidation

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: XSS Protection API 2.1.16
• Fix Version/s: XSS Protection API 2.1.18
• Component/s: XSS Protection API
• Assignee: Radu Cotescu
• Reporter: Radu Cotescu
• Created: 22/Nov/19 14:22
• Updated: 06/Dec/19 12:06
• Resolved: 22/Nov/19 16:06

Description

When falling back to simpler regular expressions to validate URLs, the current log level is WARN, which is too high. This should be set to DEBUG and a WARN should be logged only if the URL cannot be validated.

Issue Links

• is related to: SLING-8775 java.lang.StackOverflowError in XSSAPIImpl.getValidHref for long URLs