svn commit: r1859893 - /ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

svn commit: r1859893 - /ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml

jleroux@apache.org
Author: jleroux
Date: Fri May 24 17:15:04 2019
New Revision: 1859893

URL: http://svn.apache.org/viewvc?rev=1859893&view=rev
Log:
Fixed: Services allow arbitrary HTML for parameters with allow-html set to "safe"
(OFBIZ-5254)

Once again forgot to commit this changes in plugins :/

Modified:
    ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml

Modified: ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml?rev=1859893&r1=1859892&r2=1859893&view=diff
==============================================================================
--- ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml (original)
+++ ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml Fri May 24 17:15:04 2019
@@ -491,7 +491,7 @@ under the License.
         <attribute name="itemId" mode="IN" type="String" optional="false"/>
         <attribute name="listingType" mode="IN" type="String" optional="true"/>
         <attribute name="title" mode="IN" type="String" optional="true"/>
-        <attribute name="description" mode="IN" type="String" allow-html="any"/>
+        <attribute name="description" mode="IN" type="String" allow-html="safe"/>
         <attribute name="price" mode="IN" type="String" optional="true"/>
         <attribute name="currencyId" mode="IN" type="String" optional="true"/>
         <attribute mode="IN" name="imageData" optional="true" type="java.nio.ByteBuffer"/>