in src/main/java/org/apache/sling/xss/impl/XSSFilterImpl.java [389:403]
public InputStream read() {
if (embedded) {
return this.getClass().getClassLoader().getResourceAsStream(EMBEDDED_POLICY_PATH);
}
try (final ResourceResolver xssResourceResolver = resourceResolverFactory.getServiceResourceResolver(null)) {
Resource policyResource = xssResourceResolver.getResource(path);
if (policyResource != null) {
return policyResource.adaptTo(InputStream.class);
} else {
throw new IllegalStateException("Cannot read policy from " + path + ".");
}
} catch (LoginException e) {
throw new IllegalStateException("Cannot read policy.", e);
}
}