svn commit: r1759218 - /ofbiz/trunk/applications/content/servicedef/services.xml

[jacopoc]

Author: jacopoc
Date: Mon Sep  5 09:16:57 2016
New Revision: 1759218

URL: http://svn.apache.org/viewvc?rev=1759218&view=rev
Log:
Completed the fix for securing the management of blog entries by preventing tags to be added to the content of an entry when it is updated.

Modified:
    ofbiz/trunk/applications/content/servicedef/services.xml

Modified: ofbiz/trunk/applications/content/servicedef/services.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/content/servicedef/services.xml?rev=1759218&r1=1759217&r2=1759218&view=diff
==============================================================================
--- ofbiz/trunk/applications/content/servicedef/services.xml (original)
+++ ofbiz/trunk/applications/content/servicedef/services.xml Mon Sep  5 09:16:57 2016
@@ -836,8 +836,8 @@
         <attribute name="statusId" type="String" mode="IN" optional="true"/>
         <attribute name="description" type="String" mode="IN" optional="true"/>
         <attribute name="templateDataResourceId" type="String" mode="IN" optional="true"/>
-        <attribute name="articleData" type="String" mode="IN" optional="true" allow-html="any"/>
-        <attribute name="summaryData" type="String" mode="IN" optional="true" allow-html="any"/>
+        <attribute name="articleData" type="String" mode="IN" optional="true" allow-html="none"/>
+        <attribute name="summaryData" type="String" mode="IN" optional="true" allow-html="none"/>
     </service>
     <service name="getBlogEntry" engine="simple" auth="true"
         location="component://content/minilang/blog/BlogServices.xml" invoke="getBlogEntry">