* forbid XAR dependencies in JAR and WEBJAR extensions by default
mentioned in commit f68bbae3
mentioned in commit 849db965