Hi, When you look at this request: https://www.test.com/page.html?utm_source=abc&utm_medium=xzy&utm_campaign=123&utm_content=something what does your browser do? It will send this request to the backed and retrieve the HTML markup for page.html; it will download all referenced files, including image...

What configuration parameter do you want to add per tenant?

That approach is not compatible with AEM CS. May I ask why you try to achieve this?

Do you want to track the download of the PDF itself?* In this case you can augment the link which points to the PDF.* But of course that does not work if the enduser downloads the PDF without using this link, but during an non-augmented link (or if the PDF is attached to a email). Can you elaborate ...

I would assume that the vhost with the hostname "flush" does either not exist or has not configured the invalidation correctly.

If you are using AEM 6.x (and not AEM CS), you can use the Ensure Oak Index feature of ACS AEM Commons.

CWE-99 is described here (Mitre) as Insufficient input check:  The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. I assume that you re...

With this configuration you can just define the name of the HTTP header, which is copied over from the request the user made to the dispatcher into the request the dispatcher makes to AEM. You cannot add custom headers with specific values into the request to AEM with this configuration parameter.

I don't think that you can compare those. JCR Observation events are sent when something on the repository changes. OSGI events is a generic pub-sub mechanism to deliver events within the JVM.In the past JCR Observation events were translated also in Sling Resource Events, which were sent via the OS...

The OSGI event which is sent by the replication cannot be customized in a way, that you can provide a flag to the replication call, which then shows up in the event properties. Never heard of such a requirement before. That means you need to place the logic in the event handler.