[
https://issues.apache.org/jira/browse/OFBIZ-13162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17901674#comment-17901674
]
ASF subversion and git services commented on OFBIZ-13162:
---------------------------------------------------------
Commit a7c2dc356d412864ed1be973d6288a81b705c0c7 in ofbiz-framework's branch
refs/heads/release24.09 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=a7c2dc356d ]
Improved: Prevent URL parameters manipulation (OFBIZ-13147)
Reverts the revert in OFBIZ-13162
Adds a @SuppressWarnings("unused") to MacroFormRenderer::executeMacro
> [SECURITY] (CVE-2024-48962) Enhance Parameter Encoding in MacroMenuRenderer
> ----------------------------------------------------------------------------
>
> Key: OFBIZ-13162
> URL: https://issues.apache.org/jira/browse/OFBIZ-13162
> Project: OFBiz
> Issue Type: Sub-task
> Reporter: Deepak Dixit
> Assignee: Deepak Dixit
> Priority: Major
> Fix For: 18.12.17
>
>
> {{MacroMenuRenderer}} should utilize {{UtilCodec.SimpleEncoder}} to encode
> parameter values when available.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
