This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new b847976e2 Fixed: Plugin demo DataResources of type LOCAL_FILE are
rejected by the LOCAL_FILE allow-list (OFBIZ-13691)
b847976e2 is described below
commit b847976e2e3d3794d36aa9207a4fec36e97affd2
Author: Mridul Pathak <[email protected]>
AuthorDate: Fri Oct 16 16:48:48 2026 +0530
Fixed: Plugin demo DataResources of type LOCAL_FILE are rejected by the
LOCAL_FILE allow-list (OFBIZ-13691)
- ecommerce: TPL_XML_MB is now an OFBIZ_FILE pointing at
plugins/ecommerce/template/content/TplMbContent.ftl, so it is checked against
content.data.ofbiz.file.allowed.paths and the ECMC demo content renders with
its template again.
- scrum: the DemoContentProduct, DemoContentBacklog and DemoContentProject
demo contents are now stored as ELECTRONIC_TEXT, since the DEMO-CONTENT.xml
file they pointed to was removed in OFBIZ-11587.
---
ecommerce/data/DemoTemplateData.xml | 2 +-
scrum/data/scrumDemoData.xml | 15 +++++++++------
2 files changed, 10 insertions(+), 7 deletions(-)
diff --git a/ecommerce/data/DemoTemplateData.xml
b/ecommerce/data/DemoTemplateData.xml
index 2e0d59287..7ae12be9c 100644
--- a/ecommerce/data/DemoTemplateData.xml
+++ b/ecommerce/data/DemoTemplateData.xml
@@ -19,5 +19,5 @@ under the License.
-->
<entity-engine-xml>
- <DataResource dataResourceId="TPL_XML_MB" dataResourceTypeId="LOCAL_FILE"
dataTemplateTypeId="FTL"
objectInfo="component://ecommerce/template/content/TplMbContent.ftl"
createdDate="2004-06-14 11:40:15.818" createdByUserLogin="admin"
lastModifiedDate="2004-06-14 11:40:15.818" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="TPL_XML_MB" dataResourceTypeId="OFBIZ_FILE"
dataTemplateTypeId="FTL"
objectInfo="plugins/ecommerce/template/content/TplMbContent.ftl"
createdDate="2004-06-14 11:40:15.818" createdByUserLogin="admin"
lastModifiedDate="2004-06-14 11:40:15.818" lastModifiedByUserLogin="admin"/>
</entity-engine-xml>
diff --git a/scrum/data/scrumDemoData.xml b/scrum/data/scrumDemoData.xml
index 88290a5ed..0b4752b11 100644
--- a/scrum/data/scrumDemoData.xml
+++ b/scrum/data/scrumDemoData.xml
@@ -271,17 +271,20 @@ under the License.
<TimeEntry timeEntryId="DEMO-TIMEENTRY2" partyId="SCRUMTEAM-1"
fromDate="2010-10-20 00:00:00.000" rateTypeId="STANDARD"
workEffortId="DEMO-TASK-4" timesheetId="DEMO-TIMESHEET3" hours="8"
planHours="8"/>
<!-- Demo Product Content -->
- <DataResource dataResourceId="DemoContentProduct"
dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="NONE"
statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.xml"
mimeTypeId="application/octet-stream"
objectInfo="component://scrum/data/helpdata/DEMO-CONTENT.xml"
createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin"
lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
- <Content contentId="DemoContentProduct" contentTypeId="DOCUMENT"
dataResourceId="DemoContentProduct" statusId="CTNT_INITIAL_DRAFT"
contentName="DEMO-CONTENT" mimeTypeId="application/octet-stream"
createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin"
lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="DemoContentProduct"
dataResourceTypeId="ELECTRONIC_TEXT" dataTemplateTypeId="NONE"
statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.txt"
mimeTypeId="text/plain" createdDate="2010-11-01 13:35:33.211"
createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211"
lastModifiedByUserLogin="admin"/>
+ <ElectronicText dataResourceId="DemoContentProduct" textData="This is the
demo data content. There are 3 levels for uploading content: Project Content,
Product Content and Product Backlog Content."/>
+ <Content contentId="DemoContentProduct" contentTypeId="DOCUMENT"
dataResourceId="DemoContentProduct" statusId="CTNT_INITIAL_DRAFT"
contentName="DEMO-CONTENT" mimeTypeId="text/plain" createdDate="2010-11-01
13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01
13:35:35.486" lastModifiedByUserLogin="admin"/>
<ProductContent productId="DEMO-PRODUCT-1" contentId="DemoContentProduct"
productContentTypeId="SPECIFICATION" fromDate="2010-11-01 13:35:34.751"/>
<!-- Demo Backlog Content -->
- <DataResource dataResourceId="DemoContentBacklog"
dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="NONE"
statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.xml"
mimeTypeId="application/octet-stream"
objectInfo="component://scrum/data/helpdata/DEMO-CONTENT.xml"
createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin"
lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
- <Content contentId="DemoContentBacklog" contentTypeId="DOCUMENT"
dataResourceId="DemoContentBacklog" statusId="CTNT_INITIAL_DRAFT"
contentName="DEMO-CONTENT" mimeTypeId="application/octet-stream"
createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin"
lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="DemoContentBacklog"
dataResourceTypeId="ELECTRONIC_TEXT" dataTemplateTypeId="NONE"
statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.txt"
mimeTypeId="text/plain" createdDate="2010-11-01 13:35:33.211"
createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211"
lastModifiedByUserLogin="admin"/>
+ <ElectronicText dataResourceId="DemoContentBacklog" textData="This is the
demo data content. There are 3 levels for uploading content: Project Content,
Product Content and Product Backlog Content."/>
+ <Content contentId="DemoContentBacklog" contentTypeId="DOCUMENT"
dataResourceId="DemoContentBacklog" statusId="CTNT_INITIAL_DRAFT"
contentName="DEMO-CONTENT" mimeTypeId="text/plain" createdDate="2010-11-01
13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01
13:35:35.486" lastModifiedByUserLogin="admin"/>
<CustRequestContent custRequestId="TEST1" contentId="DemoContentBacklog"
fromDate="2010-11-02 10:37:42.358"/>
<!-- Demo Project Content -->
- <DataResource dataResourceId="DemoContentProject"
dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="NONE"
statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.xml"
mimeTypeId="application/octet-stream"
objectInfo="component://scrum/data/helpdata/DEMO-CONTENT.xml"
createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin"
lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
- <Content contentId="DemoContentProject" contentTypeId="DOCUMENT"
dataResourceId="DemoContentProject" statusId="CTNT_INITIAL_DRAFT"
contentName="DEMO-CONTENT" mimeTypeId="application/octet-stream"
createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin"
lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="DemoContentProject"
dataResourceTypeId="ELECTRONIC_TEXT" dataTemplateTypeId="NONE"
statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.txt"
mimeTypeId="text/plain" createdDate="2010-11-01 13:35:33.211"
createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211"
lastModifiedByUserLogin="admin"/>
+ <ElectronicText dataResourceId="DemoContentProject" textData="This is the
demo data content. There are 3 levels for uploading content: Project Content,
Product Content and Product Backlog Content."/>
+ <Content contentId="DemoContentProject" contentTypeId="DOCUMENT"
dataResourceId="DemoContentProject" statusId="CTNT_INITIAL_DRAFT"
contentName="DEMO-CONTENT" mimeTypeId="text/plain" createdDate="2010-11-01
13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01
13:35:35.486" lastModifiedByUserLogin="admin"/>
<WorkEffortContent workEffortId="DEMO-PROJECT-1"
contentId="DemoContentProject" workEffortContentTypeId="PROJECT_SPEC"
fromDate="2010-11-05 15:50:39.392"/>
</entity-engine-xml>
