bundleStatusWhitelistBundleNames is missing 2 more bundles: WebDAV & DavEx

Description

We upgraded our content-package-maven-plugin version to 1.7.0 and noticed that the deployment was still failing on our servers: We found out that 2 more bundles were missing from the vault.bundleStatusWhitelistBundleNames, namely:

  • ^org\.apache\.sling\.jcr\.webdav$

  • ^org\.apache\.sling\.jcr\.davex$

They are specified in this documentation page: https://helpx.adobe.com/experience-manager/6-3/sites/administering/using/security-checklist.html#DisableWebDAV

Activity

Show:
Stefan Seifert
August 22, 2019, 7:40 AM

ok, we will check if it makes sense to add them to the list of defaults.

for the time being you can configure them manually in your pom/parent pom by overwriting the defaults.
https://wcm.io/tooling/maven/plugins/wcmio-content-package-maven-plugin/install-mojo.html

Henry Kuijpers
August 22, 2019, 7:47 AM

Yes, that's what we did now for our project. But we would appreciate if these bundles can be added to the default config, so that we can remove that configuration from our project again.

Stefan Seifert
October 1, 2019, 4:20 PM

additional bundle expressions added in version 1.7.2 of content package maven plugin.

Henry Kuijpers
October 2, 2019, 7:28 AM

When will v1.7.2 be released? And also the accompanying global-parent?

Stefan Seifert
October 2, 2019, 7:59 AM

today ...

Fixed

Assignee

Stefan Seifert

Reporter

Henry Kuijpers

Labels

None

Components

Fix versions

Affects versions

Priority

Major