[jira] [Closed] (OFBIZ-12098) Make ruleName field in PriceForms.xml#AddPriceRules safe

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux closed OFBIZ-12098.
-----------------------------------
    Fix Version/s: 17.12.05
                   18.12.01
       Resolution: Fixed

> Make ruleName field in PriceForms.xml#AddPriceRules safe
> --------------------------------------------------------
>
>                 Key: OFBIZ-12098
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12098
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: product/catalog
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 18.12.01, 17.12.05
>
>
> I noticed an issue due to entity-auto. Unlike with a standard service you can't protect fields using allow-html="safe" except by overriding fields. So in case this must be done one by one...
> An example is ruleName field in PriceForms.xml#AddPriceRules with createProductPriceRule and updateProductPriceRule services
> See https://markmail.org/message/osdv2bfpyjuu4tol

--
This message was sent by Atlassian Jira
(v8.3.4#803005)