Just want to ask / note an issue I ran into: If you try to setup system level features, such as CSRFPolicy via a tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml but there is an amp that also has share-config-custom.xml file, the AMP will take precedence and the /shared/ version will *not* get loaded.
This introduces some problems for at least me, where I want system administrators the ability to adjust configurations around reverse proxy setups, but still want developers to create extensions for things like search form definitions for custom content models.
Thoughts / ideas?
-D