[
https://issues.apache.org/jira/browse/OFBIZ-6235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14486848#comment-14486848 ]
Adrian Crum commented on OFBIZ-6235:
------------------------------------
A feature like that could be used as an attack vector.
> Have FlexibleStringExpander applied to scripts in screens
> ---------------------------------------------------------
>
> Key: OFBIZ-6235
> URL:
https://issues.apache.org/jira/browse/OFBIZ-6235> Project: OFBiz
> Issue Type: Improvement
> Components: framework
> Affects Versions: Trunk
> Reporter: Pierre Smits
> Priority: Minor
>
> Currently the FlexibleStringExpander is applied when a ${value} is included in various elements in screens and forms.
> However it isn't possible to use a ${value} in the name or location of a script. Having this would make screens and forms more flexible.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Locked
