(cherry picked from commit 796716d441)

This is the final commit from the 2.x branch of multiple commits to fix the vulnerabilities
CVE-2019-0213 and CVE-2019-0214

RepositoryRegistry is used for indexing context now. There is still more work to do
to move the maven dependent parts into its own projects and update the dependencies.

Adding content provider service that creates repository content instances
remove direct access to the repository content instances.

Signed-off-by: olivier lamy <olamy@apache.org>

Signed-off-by: olivier lamy <olamy@apache.org>

As suggested in the SLF4J FAQ:
https://www.slf4j.org/faq.html#logging_performance
.. parameterized logging can improve the efficiency of logger calls when
logging at the specified level is disabled.

In addition, per the FAQ: https://www.slf4j.org/faq.html#paramException
since SLF4J 1.6.0 it is possible to use parameterized logging and also
log an exception/throwable.

toString() is called automatically:
https://www.slf4j.org/faq.html#string_contents

These changes were suggested by SLF4J Helper for NetBeans IDE:
http://plugins.netbeans.org/plugin/72557/

Signed-off-by: olivier lamy <olamy@apache.org>

Adding new API module (metadata-statistics-api) for statistics and move the
jcr specific tasks to the metadata store module.

Providing interfaces for the statistics API.

Removing dependencies to store specific libraries (like JCR) from the statistic
modules.

Signed-off-by: olivier lamy <olamy@apache.org>

Signed-off-by: olivier lamy <olamy@apache.org>

Signed-off-by: olivier lamy <olamy@apache.org>

Allow to set a check path for connection checks to the remote repositories.
This is useful for repositories that do not allow to browse the base directory.

Improved the fix for MRM-1933

Remove trailing slashes from the remote repositories
Use special check paths for certain servers

Improved handling of slashes at the beginning of filters
Added patterns for surefire tests to ensure the test runs

Remove the JDO dependencies and set the JPA implementation as only
database alternative and default implementation. Uses the same database
as JDO before.

Error is only displayed, if LDAP is used as repository. The error
messages are more detailed and internationalized.