[jira] [Commented] (OFBIZ-12114) Image not available on trunk demo

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-12114?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17256070#comment-17256070 ]

Jacques Le Roux commented on OFBIZ-12114:
-----------------------------------------

The file is missing in the demo VM at /home/ofbizDemo/trunk/themes/common-theme/webapp/images/products/GZ-1000

Image files there have been replaced 2020/07/05 by
{code:java}
    <?xml version=”1.0" standalone=”no”?>
    <!DOCTYPE svg PUBLIC “-//W3C//DTD SVG 1.1//EN” “http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">

    <svg version=”1.1" baseProfile=”full” xmlns=”http://www.w3.org/2000/svg">
    <polygon id=”triangle” points=”0,0 0,50 50,0" fill=”#009900" stroke=”#004400"/>
    <script type=”text/javascript”>
    alert(‘Vulnerable to XSS attacks’);
    </script>
    </svg>
-----------------------------205302355730027
Content-Disposition: form-data; name="upload_file_type_bogus"

original
{code}
I guess related to OFBIZ-12080.

There are other similar files under /home/ofbizDemo/trunk/themes/common-theme/webapp/images/products/.  I'm not sure why this seems to prevent the loading the files here. I'll try to add a step in the updating script to removed the content of this directory.

> Image not available on trunk demo
> ---------------------------------
>
>                 Key: OFBIZ-12114
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12114
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ecommerce
>    Affects Versions: Trunk
>         Environment: Trunk demo
>            Reporter: Jacques Le Roux
>            Priority: Minor
>             Fix For: Upcoming Branch
>
>
> On trunk demo the URL https://demo-trunk.ofbiz.apache.org/images/products/GZ-1000/small.png returns a 404 when it works on stable, locally and for https://demo-trunk.ofbiz.apache.org/images/products/WG-1111/small.png
> It's visible on the main page of ecommerce (or ecomseo) iet https://demo-stable.ofbiz.apache.org/ecommerce/control/main

--
This message was sent by Atlassian Jira
(v8.3.4#803005)