Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133) #839

Open
wants to merge 10 commits into
base: trunk
Choose a base branch
from

Commits on Oct 10, 2024

  1. Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133)

    Second improvement on this functionality with increase the security by analyse each script to control the presence of potential code injection.
    
    The regexp to control is a property: security.deniedScriptletsTokens.
    If a script match the regexp, OFBiz raise in log an alert with the script and the script hash. The script is disabled and can't run.
    
    If you have a safe script who is matched by the regexp, you can add the hash given by OFBiz on the property: security.allowedScriptletHashes
    nmalin committed Oct 10, 2024
    Configuration menu
    Copy the full SHA
    d200480 View commit details
    Browse the repository at this point in the history
  2. Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…

    …Util.java
    
    Co-authored-by: Gil Portenseigne <[email protected]>
    nmalin and gilPts authored Oct 10, 2024
    Configuration menu
    Copy the full SHA
    a64a3cd View commit details
    Browse the repository at this point in the history
  3. Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…

    …Util.java
    
    Co-authored-by: Gil Portenseigne <[email protected]>
    nmalin and gilPts authored Oct 10, 2024
    Configuration menu
    Copy the full SHA
    377d70c View commit details
    Browse the repository at this point in the history
  4. Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…

    …Util.java
    
    Co-authored-by: Gil Portenseigne <[email protected]>
    nmalin and gilPts authored Oct 10, 2024
    Configuration menu
    Copy the full SHA
    60c22dd View commit details
    Browse the repository at this point in the history
  5. Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…

    …Util.java
    
    Co-authored-by: Gil Portenseigne <[email protected]>
    nmalin and gilPts authored Oct 10, 2024
    Configuration menu
    Copy the full SHA
    d9983d8 View commit details
    Browse the repository at this point in the history
  6. Update framework/base/src/main/java/org/apache/ofbiz/base/util/Script…

    …Util.java
    
    Co-authored-by: Gil Portenseigne <[email protected]>
    nmalin and gilPts authored Oct 10, 2024
    Configuration menu
    Copy the full SHA
    e52afd3 View commit details
    Browse the repository at this point in the history

Commits on Oct 11, 2024

  1. Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133)

    Improve reg exp to support more possible code injection
    nmalin committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    fd5678d View commit details
    Browse the repository at this point in the history
  2. Improved: Allow to use GroovyDsl in FlexibleStringExpander (OFBIZ-13133)

    Improve reg exp to support more possible code injection
    nmalin committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    237f0ed View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    73d5a3d View commit details
    Browse the repository at this point in the history

Commits on Oct 17, 2024

  1. Configuration menu
    Copy the full SHA
    067b047 View commit details
    Browse the repository at this point in the history