Jacques Le Roux created OFBIZ-12594:
---------------------------------------
Summary: Prevent Freemarker interpolation in fields
Key: OFBIZ-12594
URL: https://issues.apache.org/jira/browse/OFBIZ-12594
Project: OFBiz
Issue Type: Improvement
Components: ALL APPLICATIONS, ALL PLUGINS
Affects Versions: 18.12.06, 22.01.01
Reporter: Jacques Le Roux
Assignee: Jacques Le Roux
OFBIZ-12587 is a definitive solution to prevent any kind of Freemarker
exploits. But it's hard to realise because OFBiz exposes objects, like
attributes from the Servlet scopes. So in the meantime preventing Freemarker
interpolation in fields is a pragmatic solution.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
