AEM 6.2 启动错误 ESAPI 目录或文件不可读

Question

当我启动 AEM 实例时，在控制台中我看到 validation.properties FileNotFound 错误，

完整的日志：

Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=256M; support was removed in 8.0
31.05.2016 17:24:26.379 *INFO * [main] Setting sling.home=crx-quickstart (command line)
31.05.2016 17:24:26.395 *INFO * [main] Starting Apache Sling in D:\AEM 6.2\crx-quickstart
31.05.2016 17:24:26.395 *INFO * [main] Sling  Extension Lib Home : D:\AEM 6.2\crx-quickstart\launchpad\ext
31.05.2016 17:24:26.395 *INFO * [Apache Sling Control Listener@/127.0.0.1:56056] Apache Sling Control Listener started
31.05.2016 17:24:26.410 *INFO * [main] Checking launcher JAR in folder D:\AEM 6.2\crx-quickstart\launchpad
31.05.2016 17:24:26.426 *INFO * [main] Existing launcher is up to date, using it: 5.4.0.2_6_10-B004 (org.apache.sling.launchpad.base.jar)
31.05.2016 17:24:26.441 *INFO * [main] Loading launcher class org.apache.sling.launchpad.base.app.MainDelegate from org.apache.sling.launchpad.base.jar
31.05.2016 17:24:26.444 *INFO * [main] External Libs Home (ext) is null or does not exists.
31.05.2016 17:24:26.459 *INFO * [main] Setting sling.properties=conf/sling.properties
31.05.2016 17:24:26.461 *INFO * [main] Setting sling.home=crx-quickstart
31.05.2016 17:24:26.463 *INFO * [main] Setting sling.launchpad=D:\AEM 6.2\crx-quickstart\launchpad
31.05.2016 17:24:26.464 *INFO * [main] Setting org.osgi.service.http.port=4502
31.05.2016 17:24:26.465 *INFO * [main] Starting launcher ...
31.05.2016 17:24:26.476 *INFO * [main] HTTP server port: 4502
31.05.2016 17:24:27.706 *INFO* [FelixStartLevel] org.apache.sling.commons.log.logback.internal.Activator LogbackManager initialized at bundle startup
31.05.2016 17:24:27.726 *INFO* [FelixStartLevel] org.apache.sling.commons.logservice Service [org.apache.sling.commons.logservice.internal.LogServiceFactory,18, [org.osgi.service.log.LogService]] ServiceEvent REGISTERED
31.05.2016 17:24:27.731 *INFO* [FelixStartLevel] org.apache.sling.commons.logservice Service [org.apache.sling.commons.logservice.internal.LogReaderServiceFactory,19, [org.osgi.service.log.LogReaderService]] ServiceEvent REGISTERED
31.05.2016 17:24:27.736 *INFO* [FelixStartLevel] org.apache.sling.commons.logservice BundleEvent STARTED
31.05.2016 17:24:27.740 *INFO* [FelixStartLevel] org.apache.sling.installer.core BundleEvent RESOLVED
31.05.2016 17:24:27.740 *INFO* [FelixStartLevel] org.apache.sling.installer.core BundleEvent STARTING
**Attempting to load ESAPI.properties via file I/O.
Attempting to load ESAPI.properties as resource file via file I/O.
Not found in 'org.owasp.esapi.resources' directory or file not readable: D:\AEM 6.2\ESAPI.properties
Not found in SystemResource Directory/resourceDirectory: .esapi\ESAPI.properties
Not found in 'user.home' (C:\Users\Raj Kumar) directory: C:\Users\Raj Kumar\esapi\ESAPI.properties
Loading ESAPI.properties via file I/O failed. Exception was: java.io.FileNotFoundException
Attempting to load ESAPI.properties via the classpath.
SUCCESSFULLY LOADED ESAPI.properties via the CLASSPATH from '/ (root)' using class loader for DefaultSecurityConfiguration class!
Attempting to load validation.properties via file I/O.
Attempting to load validation.properties as resource file via file I/O.
Not found in 'org.owasp.esapi.resources' directory or file not readable: D:\AEM 6.2\validation.properties
Not found in SystemResource Directory/resourceDirectory: .esapi\validation.properties
Not found in 'user.home' (C:\Users\Raj Kumar) directory: C:\Users\Raj Kumar\esapi\validation.properties
Loading validation.properties via file I/O failed.
Attempting to load validation.properties via the classpath.**
SUCCESSFULLY LOADED validation.properties via the CLASSPATH from '/ (root)' using class loader for DefaultSecurityConfiguration class!
RAWProcessor succesfully installed
31.05.2016 17:24:52.803 *INFO * [main] Startup completed

错误：

Attempting to load ESAPI.properties via file I/O.
    Attempting to load ESAPI.properties as resource file via file I/O.
    Not found in 'org.owasp.esapi.resources' directory or file not readable: D:\AEM 6.2\ESAPI.properties
    Not found in SystemResource Directory/resourceDirectory: .esapi\ESAPI.properties
    Not found in 'user.home' (C:\Users\Raj Kumar) directory: C:\Users\Raj Kumar\esapi\ESAPI.properties
    Loading ESAPI.properties via file I/O failed. Exception was: java.io.FileNotFoundException
    Attempting to load ESAPI.properties via the classpath.
    SUCCESSFULLY LOADED ESAPI.properties via the CLASSPATH from '/ (root)' using class loader for DefaultSecurityConfiguration class!
    Attempting to load validation.properties via file I/O.
    Attempting to load validation.properties as resource file via file I/O.
    Not found in 'org.owasp.esapi.resources' directory or file not readable: D:\AEM 6.2\validation.properties
    Not found in SystemResource Directory/resourceDirectory: .esapi\validation.properties
    Not found in 'user.home' (C:\Users\Raj Kumar) directory: C:\Users\Raj Kumar\esapi\validation.properties
    Loading validation.properties via file I/O failed.
    Attempting to load validation.properties via the classpath.

validation.properties 文件是什么？

如何解决这个错误？

我在 CQ 5.6 上也看到了同样的错误，但不知道它的根本原因。 谁能解释一下？

提前致谢。

Answer 1

validation.properties 文件用于“com.day.cq.cq-xssprotection”。捆 看看里面有什么

1. 转到 Felix 控制台 (http://host:port/system/console/bundles/) 找到名为“Adobe Granite XSS Protection (com.day.cq.cq-xssprotection)”的捆绑包号。
2. 转到 your-aem-instalation-folder\crx-quickstart\launchpad\felix 并找到具有相同捆绑编号的文件夹。
3. 将 bundle 文件夹中的 bundle 复制到某个路径，其中包含一些默认 version0.0。
4. 使用任何反编译器，您会看到 ESAPI.properties 将包含validation.properties 条目，并且在同一级别，您将拥有一个validation.properties 文件，该文件也包含在同一个包中。

在启动 AEM 实例时，您可以在 stdout.log 文件中看到以下错误。它告诉你它是从哪里成功加载的。

您可以在下面找到有关它的更多详细信息。 https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API

并且要自定义 vaidator 属性文件，您可以尝试 https://www.owasp.org/index.php/ESAPI_Getting_Started_Guide