[
https://issues.apache.org/jira/browse/OFBIZ-13316?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18040568#comment-18040568
]
ASF subversion and git services commented on OFBIZ-13316:
---------------------------------------------------------
Commit 11c3cb34ba2b2326eba6671b61f5054b18ce2a74 in ofbiz-framework's branch
refs/heads/trunk from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=11c3cb34ba ]
Improved: Better secure "openSourceFile" request-map (OFBIZ-13316)
Don't forget to set widget.dev.cmd.openSourceFile property to the IDE you use
(IDEA or Eclipse).
Thank you to "Deep Dark" <[email protected]> (pl4tyz) who reported this
possible security issue.
> Better secure "openSourceFile" request-map
> -------------------------------------------
>
> Key: OFBIZ-13316
> URL: https://issues.apache.org/jira/browse/OFBIZ-13316
> Project: OFBiz
> Issue Type: Sub-task
> Components: ALL COMPONENTS
> Affects Versions: 24.09.04
> Reporter: pl4tyz
> Assignee: Jacques Le Roux
> Priority: Minor
> Fix For: 24.09.04
>
> Attachments: screenshot-1.png
>
>
> This functionality has been put in with OFBIZ-12018.
> We would also need a documentation on how to use it. I was unable to use it,
> though I did not persevere. Is it still usable ?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)