in src/main/java/org/apache/sling/xss/impl/XSSFilterImpl.java [324:334]
private <T> T withPolicyResource(Function<Resource, T> mapper) {
try (final ResourceResolver xssResourceResolver = resourceResolverFactory.getServiceResourceResolver(null)) {
Resource policyResource = xssResourceResolver.getResource(policyPath);
if (policyResource != null) {
return mapper.apply(policyResource);
}
} catch (final LoginException e) {
logger.error("Unable to load the default policy file.", e);
}
return null;
}