[ https://issues.apache.org/jira/browse/OFBIZ-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jacques Le Roux closed OFBIZ-12098. ----------------------------------- Fix Version/s: 17.12.05 18.12.01 Resolution: Fixed > Make ruleName field in PriceForms.xml#AddPriceRules safe > -------------------------------------------------------- > > Key: OFBIZ-12098 > URL: https://issues.apache.org/jira/browse/OFBIZ-12098 > Project: OFBiz > Issue Type: Sub-task > Components: product/catalog > Affects Versions: Trunk > Reporter: Jacques Le Roux > Assignee: Jacques Le Roux > Priority: Major > Fix For: 18.12.01, 17.12.05 > > > I noticed an issue due to entity-auto. Unlike with a standard service you > can't protect fields using allow-html="safe" except by overriding fields. So > in case this must be done one by one... > An example is ruleName field in PriceForms.xml#AddPriceRules with > createProductPriceRule and updateProductPriceRule services > See https://markmail.org/message/osdv2bfpyjuu4tol -- This message was sent by Atlassian Jira (v8.3.4#803005)