title: How to install owasp esapi bundle for antisami library in cq 5.5(and 5.6)?
body: <p>I asked <a href="https://stackoverflow.com/questions/24800295/how-to-configure-antysamy-in-cq-5-5/24801677">following question</a> about integration antysami library and cq. But I have related questions to result achieve.</p>
  
  <p>I noticed that <a href="http://dev.day.com/docs/en/cq/5-5/deploying/security_checklist.html#Protect%20against%20Cross-Site%20Scripting%20%28XSS%29" rel="nofollow noreferrer">cq5 documentation for 5.5</a> doesn't contain information about antisamy(on the other hand <a href="http://dev.day.com/docs/en/cq/current/deploying/security_checklist.html#Protect%20against%20Cross-Site%20Scripting%20%28XSS%29" rel="nofollow noreferrer">cq 5.6 documentaion</a> contains this information)</p>
  
  <p>In <a href="https://stackoverflow.com/a/24801677/2674303">answer to question I mentioned</a> I see that for using antysamy I should  have installed owasp esapi bundle installed in your instance. Now I have two instances of cq locally (5.5 and 5.6.1 versions). In both instances I see </p>
  
  <blockquote>
    <p>/libs/cq/xssprotection/config.xml</p>
  </blockquote>
  
  <p>But both instances don't contain owasp esapi bundle. (I watch it by this link: <code>http://localhost:4502/system/console/bundles</code>)</p>
  
  <p>Please provide steps for achieve owasp esapi bundle installation to my local instance. Does this procedure differ for cq 5.5 and cq 5.6(.1) ?</p>
  
  <h2>UPDATE:</h2>
  
  <p>my current meaning(please approve or correct it) looks so:</p>
  
  <ol>
  <li><p>download from
  <a href="http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.esapi/2.0GA_1" rel="nofollow noreferrer">http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.esapi/2.0GA_1</a>
  third party bundle and install it to cq.</p>
  
  <p>After this step I saw that this bundle in state installed(not
  active)</p></li>
  <li><p>To make mentioned bundle active I installed this bundle list to my
      instances:</p>
  
  <pre><code>http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.antisamy/1.4.5_1
  http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-beanutils/1.8.3_2
  http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-configuration/1.4_4
  http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces/2.11.0_1
  http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xmlresolver/1.2_1
  </code></pre></li>
  </ol>
  
  <p>please correct if I wrong.</p>