Re: [ofbiz-plugins] branch trunk updated: Improved: "auth" should be true for all the request url used for Application components

Hi Jacques, I think we can't make auth true for getAssociatedStateList, this will break the anon checkout flow. Thanks & Regards -- Deepak Dixit ofbiz.apache.org On Sat, Mar 14, 2020 at 1:19 PM wrote: > This is an automated email from the ASF dual-hosted git repository. > > jleroux pushed a c

Re: [TEST] Test "POC for CSRF Token"

Hi All, If you are interested to test, manually or with the tool of you choice, you can do so at https://168.63.29.103:8443/webtools. This is thank to Ross Gardler and Microsoft for providing an Azure  Ubuntu 18.04.4 LTS  VM where I installed OFBiz trunk patched for CSRF. Please break it :)

Re: Demo instance for OFBiz 17.12 release and remove 13.07 demo

Thank you everyone for your response. Hi Jacques, I will take care of this and will sync with you and the team in case any help needed. Best regards, Swapnil M Mane, ofbiz.apache.org On Sat, Mar 14, 2020 at 4:32 PM Jacques Le Roux < jacques.le.r...@les7arts.com> wrote: > Hi, > > Someone will