We’re exploring a migration from AEM 6.5 (6.5.19, Java 11, ~100-page static site) to AEM as a Cloud Service.Curious what others have experienced, like key things to watch out for migration challenges, no-go's, unexpected challenges. Our website uses the typical1. 1 Language, region - en, us2. Asset...
You'll should be okay as long as the website traffic load on the servers are not high, that is if the website usage is not high. Again this is a general question and also need to see what content is being served, regions, languages, APIs/integrations etc. need to be accounted for. We did something s...
That's a great question, though I'm answering an old question (from a deleted-account), but the question is very relevant even today (2025), and it's a concern many of us share as well when thinking about the long-term maintenance of our on-premise instances. AEM is a Curated Product Stack, Not Just...
Usually AEM 6.x on-premise license is perpetual - linked to the contract with Adobe. The license key does not contain an expiration date. 1. You can check the license on your AEM Author at "<server>/system/console/productinfo" 2. I don't think you CMS will stop working on the expiration date, but yo...
@Jörg_Hoh @Shiv_Prakash_Patel this may be a lot of work?Many projects built with AEM Archetype still use javax.* referencesjavax.servletjavax.annotationjavax.jcrhttps://github.com/adobe/aem-project-archetype/blob/develop/src/main/archetype/pom.xml <!-- Servlet API -->
<dependency>
<groupId>javax....
Thanks @gkalyan for the help! Updates on the fix:1. This is not cache poisoning.2. The error was happening when the site was being called with a manipulated header as "Handle: somestring"3. While "Handle" is not a standard header and a custom one, we verified that default output instead of a 403 is...
how can we do this?our configs:/conf.d/available_vhosts/aem-site_publish.vhost
<IfModule mod_headers.c>
Header set X-XSS-Protection "1; mode=block"
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
# Header always add X-Vhost "publish"
Header merge X...