This is an automated email from the ASF dual-hosted git repository. jacopoc pushed a commit to branch release24.09 in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit dd823588254676e4eccb4e104d7a203946bfdf9e Author: Jacopo Cappellato <[email protected]> AuthorDate: Wed Mar 11 08:28:51 2026 +0100 Fixed: Update viewShipmentLabel request to require authentication --- applications/product/webapp/facility/WEB-INF/controller.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/applications/product/webapp/facility/WEB-INF/controller.xml b/applications/product/webapp/facility/WEB-INF/controller.xml index b54fa20465..e7cfcb5ac4 100644 --- a/applications/product/webapp/facility/WEB-INF/controller.xml +++ b/applications/product/webapp/facility/WEB-INF/controller.xml @@ -1159,7 +1159,7 @@ under the License. </request-map> <!-- note: this is an insecure version of above for purposes of rendering via fop, which cannot access over https --> <request-map uri="viewShipmentLabel"> - <security https="false" auth="false"/> + <security https="false" auth="true"/> <event type="java" path="org.apache.ofbiz.shipment.shipment.ShipmentEvents" invoke="viewShipmentPackageRouteSegLabelImage"/> <response name="success" type="none" value=""/> <response name="error" type="view" value="EditShipmentRouteSegments"/>
