Konrad Windszus

[MNG-7572] Allow plugin descriptor to require loading extensions

1

Following this checklist to help us incorporate your contribution quickly and easily: - [ ] Make sure there is a [JIRA issue](https://issues.apache.org/jira/browse/MNG) filed for the change (usually before you start...

Currently the submodule within `ui-tests` (e.g. either https://github.com/adobe/aem-project-archetype/tree/develop/src/main/archetype/ui.tests.wdio/test-module or https://github.com/adobe/aem-project-archetype/tree/develop/src/main/archetype/ui.tests.cypress/test-module) are only built through the special profiles. Those profiles either require Docker to be installed and/or Selenium and AEM running....

The modules at https://github.com/adobe/aem-project-archetype/blob/develop/src/main/archetype/ui.tests.cypress/pom.xml and https://github.com/adobe/aem-project-archetype/blob/develop/src/main/archetype/ui.tests.wdio/pom.xml have default packaging (=`jar`) but only build a secondary/attached artifact with the `maven-archiver-plugin`. That leads to issues with more recent versions of `maven-install-plugin` and...

Instead of using `maven-exec-plugin` for calling `docker build ....` one can nowadays rely on [`jib-maven-plugin`](https://github.com/GoogleContainerTools/jib/tree/master/jib-maven-plugin) which builds the docker container just with Java means (and therefore does not require `docker`...

Please add replication metadata for the relevant content in https://github.com/adobe/aem-project-archetype/tree/develop/src/main/archetype/ui.content/src/main/content/jcr_root. You can use the validator provided at https://github.com/Netcentric/aem-replication-metadata-validator/tree/main to check during the build that all replication metadata is set correctly....

Disable passing on authorization header by default

4

In https://github.com/adobe/aem-project-archetype/blob/183706c16758fc02a8becc16d2dc8a5b55e7ef46/src/main/archetype/dispatcher.cloud/src/conf.dispatcher.d/clientheaders/default_clientheaders.any#L43 the `Authorization` header is forwarded to AEM. That can be abused with certain endpoints to do brute-force credential attacks on the Basic Auth Handler (compare with https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/disable-basic-authentication/m-p/359084/highlight/true#M48638). Therefore...

npm ERR! code EACCES with Docker container based on node14 or newer

1

I tried to execute a docker build in jenkins based on this example: https://github.com/cypress-io/cypress-example-kitchensink/blob/master/basic/Jenkinsfile but all newer versions fail with ``` $ docker run -t -d -u 1013:1015 -w /var/lib/jenkins/workspace/***...

Prevent warnings "Unexpected changes (38) performed on a non-default mount" during AEMaaCS first Startup Hook execution

2

The following WARNs are emitted in the deployment log in the Cloud Manager: ``` 5.02.2024 11:46:49.748 *WARN* [ResourceResolverFactory registration] org.apache.jackrabbit.oak.composite.impl.NonDefaultMountWriteReportingObserver$ChangeReporter Unexpected changes (38) performed on a non-default mount. Printing at...

AEMaaCS ships with https://github.com/apache/aries/tree/trunk/jmx/jmx-whiteboard in version 1.2.0. We have seen issues like this during creating the AEM image with Cloud Manager: ``` 15.02.2024 11:46:49.797 *INFO* [FelixLogListener] Events.Service.biz.netcentric.cq.tools.accesscontroltool.bundle Service [biz.netcentric.cq.tools.actool.installhook.impl.AcToolInstallHookServiceImpl,1359, [biz.netcentric.cq.tools.actool.installhook.AcToolInstallHookService]]...

According to https://sensei.securecodewarrior.com/recipes/scw:snakeyaml:safeconstructor-no-args the `SafeConstructor` should be used with Snakeyaml to increase security.