[jira] [Commented] (OFBIZ-12098) Make ruleName field in PriceForms.xml#AddPriceRules safe

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (OFBIZ-12098) Make ruleName field in PriceForms.xml#AddPriceRules safe

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17252391#comment-17252391 ]

ASF subversion and git services commented on OFBIZ-12098:
---------------------------------------------------------

Commit 4e400fb47a0ddaf271cc8c97a05ad77fbf7e0c34 in ofbiz-framework's branch refs/heads/release18.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=4e400fb ]

Fixed: Make ruleName field in PriceForms.xml#AddPriceRules safe (OFBIZ-12098)

I noticed an issue due to entity-auto. Unlike with a standard service you can't
protect fields using allow-html="safe" except by overriding fields. So in case
this must be done one by one...

An example is ruleName field in PriceForms.xml#AddPriceRules with
createProductPriceRule and updateProductPriceRule services

This fixes this only case...
Also removes trailing blanks and only that (by IDE setting)


> Make ruleName field in PriceForms.xml#AddPriceRules safe
> --------------------------------------------------------
>
>                 Key: OFBIZ-12098
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12098
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: product/catalog
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> I noticed an issue due to entity-auto. Unlike with a standard service you can't protect fields using allow-html="safe" except by overriding fields. So in case this must be done one by one...
> An example is ruleName field in PriceForms.xml#AddPriceRules with createProductPriceRule and updateProductPriceRule services
> See https://markmail.org/message/osdv2bfpyjuu4tol



--
This message was sent by Atlassian Jira
(v8.3.4#803005)