eXist-db/exist — pull request #217 by dizzzz (2014-05-13 19:44:52+00:00)
Title: Improved security of XQueryStartupTrigger

Improved security considerations of the XQueryStartupTrigger;

/db/system/autostart bust be SYSTEM/dba/0770

scripts must be owned by dba user, group DBA, 0770 and mime-type "application/xquery", and name should end with .xq/.xquery/.xqy

made very picky for obvious reasons