[
https://issues.apache.org/jira/browse/OFBIZ-13179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18037666#comment-18037666
]
ASF subversion and git services commented on OFBIZ-13179:
---------------------------------------------------------
Commit ae3b657c6740987c52e9d7f201e83e6d28a019e0 in ofbiz-framework's branch
refs/heads/trunk from Nicolas Malin
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=ae3b657c67 ]
Fixed: Improve ViewHandler interface (OFBIZ-13179)
After the migration on new interface to use the function prepareViewContext for
FreeMarkerViewHandler, some calls present on groovy class weren't migrate and
called the older function FreeMarkerViewHandler.prepOfbizRoot.
Thanks Jacques Leroux for the detection
> Improve ViewHandler interface
> -----------------------------
>
> Key: OFBIZ-13179
> URL: https://issues.apache.org/jira/browse/OFBIZ-13179
> Project: OFBiz
> Issue Type: Improvement
> Components: framework
> Affects Versions: 24.09.01
> Reporter: Nicolas Malin
> Assignee: Nicolas Malin
> Priority: Major
> Fix For: 24.09.01
>
> Attachments: OFBIZ-13153-fix.patch
>
>
> We extend *AbstractViewHandler* with a new method to override
> {*}prepareViewContext{*}.
> For each view handler implementation this will allow to control context used
> for rendering, applying Scriptlet token detection for security purpose.
> A new class *SecuredFreemarker* has been created to manage freemarker
> specific controls, outside global *SecurityUtil* class.
> We also add a new parameter *secure-context* (set true by default) to
> view-map xml element to indicate that this view allow unsecure rendering,
> this implies the view-map to required authentication.
>
> For custom implementation of AbstractViewHandler, you can improve quickly
> your class just add the following function
> {code:java}
> @Override
> public Map<String, Object> prepareViewContext(HttpServletRequest request,
> HttpServletResponse response, ConfigXMLReader.ViewMap viewMap) {
> return Map.of();
> } {code}
> Thanks to Gil Portenseigne for help
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
