[jira] [Created] (OFBIZ-12098) Make ruleName field in PriceForms.xml#AddPriceRules safe

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Created] (OFBIZ-12098) Make ruleName field in PriceForms.xml#AddPriceRules safe

Nicolas Malin (Jira)
Jacques Le Roux created OFBIZ-12098:
---------------------------------------

             Summary: Make ruleName field in PriceForms.xml#AddPriceRules safe
                 Key: OFBIZ-12098
                 URL: https://issues.apache.org/jira/browse/OFBIZ-12098
             Project: OFBiz
          Issue Type: Sub-task
          Components: product/catalog
    Affects Versions: Trunk
            Reporter: Jacques Le Roux
            Assignee: Jacques Le Roux


I noticed an issue due to entity-auto. Unlike with a standard service you can't protect fields using allow-html="safe" except by overriding fields. So in case this must be done one by one...

An example is ruleName field in PriceForms.xml#AddPriceRules with createProductPriceRule and updateProductPriceRule services

See https://markmail.org/message/osdv2bfpyjuu4tol



--
This message was sent by Atlassian Jira
(v8.3.4#803005)