-
Notifications
You must be signed in to change notification settings - Fork 531
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133) #839
base: trunk
Are you sure you want to change the base?
Commits on Oct 10, 2024
-
Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133)
Second improvement on this functionality with increase the security by analyse each script to control the presence of potential code injection. The regexp to control is a property: security.deniedScriptletsTokens. If a script match the regexp, OFBiz raise in log an alert with the script and the script hash. The script is disabled and can't run. If you have a safe script who is matched by the regexp, you can add the hash given by OFBiz on the property: security.allowedScriptletHashes
Configuration menu - View commit details
-
Copy full SHA for d200480 - Browse repository at this point
Copy the full SHA d200480View commit details -
Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…
…Util.java Co-authored-by: Gil Portenseigne <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for a64a3cd - Browse repository at this point
Copy the full SHA a64a3cdView commit details -
Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…
…Util.java Co-authored-by: Gil Portenseigne <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 377d70c - Browse repository at this point
Copy the full SHA 377d70cView commit details -
Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…
…Util.java Co-authored-by: Gil Portenseigne <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 60c22dd - Browse repository at this point
Copy the full SHA 60c22ddView commit details -
Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…
…Util.java Co-authored-by: Gil Portenseigne <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for d9983d8 - Browse repository at this point
Copy the full SHA d9983d8View commit details -
Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…
…Util.java Co-authored-by: Gil Portenseigne <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for e52afd3 - Browse repository at this point
Copy the full SHA e52afd3View commit details
Commits on Oct 11, 2024
-
Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133)
Improve reg exp to support more possible code injection
Configuration menu - View commit details
-
Copy full SHA for fd5678d - Browse repository at this point
Copy the full SHA fd5678dView commit details -
Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133)
Improve reg exp to support more possible code injection
Configuration menu - View commit details
-
Copy full SHA for 237f0ed - Browse repository at this point
Copy the full SHA 237f0edView commit details -
Configuration menu - View commit details
-
Copy full SHA for 73d5a3d - Browse repository at this point
Copy the full SHA 73d5a3dView commit details
Commits on Oct 17, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 067b047 - Browse repository at this point
Copy the full SHA 067b047View commit details