You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by mr...@apache.org on 2026/10/16 11:38:00 UTC
(ofbiz-plugins) branch release24.09 updated: Fixed: Plugin demo DataResources of type LOCAL_FILE are rejected by the LOCAL_FILE allow-list (OFBIZ-13691)
This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new b847976e2 Fixed: Plugin demo DataResources of type LOCAL_FILE are rejected by the LOCAL_FILE allow-list (OFBIZ-13691)
b847976e2 is described below
commit b847976e2e3d3794d36aa9207a4fec36e97affd2
Author: Mridul Pathak <mr...@gmail.com>
AuthorDate: Fri Oct 16 16:48:48 2026 +0530
Fixed: Plugin demo DataResources of type LOCAL_FILE are rejected by the LOCAL_FILE allow-list (OFBIZ-13691)
- ecommerce: TPL_XML_MB is now an OFBIZ_FILE pointing at plugins/ecommerce/template/content/TplMbContent.ftl, so it is checked against content.data.ofbiz.file.allowed.paths and the ECMC demo content renders with its template again.
- scrum: the DemoContentProduct, DemoContentBacklog and DemoContentProject demo contents are now stored as ELECTRONIC_TEXT, since the DEMO-CONTENT.xml file they pointed to was removed in OFBIZ-11587.
---
ecommerce/data/DemoTemplateData.xml | 2 +-
scrum/data/scrumDemoData.xml | 15 +++++++++------
2 files changed, 10 insertions(+), 7 deletions(-)
diff --git a/ecommerce/data/DemoTemplateData.xml b/ecommerce/data/DemoTemplateData.xml
index 2e0d59287..7ae12be9c 100644
--- a/ecommerce/data/DemoTemplateData.xml
+++ b/ecommerce/data/DemoTemplateData.xml
@@ -19,5 +19,5 @@ under the License.
-->
<entity-engine-xml>
- <DataResource dataResourceId="TPL_XML_MB" dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="FTL" objectInfo="component://ecommerce/template/content/TplMbContent.ftl" createdDate="2004-06-14 11:40:15.818" createdByUserLogin="admin" lastModifiedDate="2004-06-14 11:40:15.818" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="TPL_XML_MB" dataResourceTypeId="OFBIZ_FILE" dataTemplateTypeId="FTL" objectInfo="plugins/ecommerce/template/content/TplMbContent.ftl" createdDate="2004-06-14 11:40:15.818" createdByUserLogin="admin" lastModifiedDate="2004-06-14 11:40:15.818" lastModifiedByUserLogin="admin"/>
</entity-engine-xml>
diff --git a/scrum/data/scrumDemoData.xml b/scrum/data/scrumDemoData.xml
index 88290a5ed..0b4752b11 100644
--- a/scrum/data/scrumDemoData.xml
+++ b/scrum/data/scrumDemoData.xml
@@ -271,17 +271,20 @@ under the License.
<TimeEntry timeEntryId="DEMO-TIMEENTRY2" partyId="SCRUMTEAM-1" fromDate="2010-10-20 00:00:00.000" rateTypeId="STANDARD" workEffortId="DEMO-TASK-4" timesheetId="DEMO-TIMESHEET3" hours="8" planHours="8"/>
<!-- Demo Product Content -->
- <DataResource dataResourceId="DemoContentProduct" dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="NONE" statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.xml" mimeTypeId="application/octet-stream" objectInfo="component://scrum/data/helpdata/DEMO-CONTENT.xml" createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
- <Content contentId="DemoContentProduct" contentTypeId="DOCUMENT" dataResourceId="DemoContentProduct" statusId="CTNT_INITIAL_DRAFT" contentName="DEMO-CONTENT" mimeTypeId="application/octet-stream" createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="DemoContentProduct" dataResourceTypeId="ELECTRONIC_TEXT" dataTemplateTypeId="NONE" statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.txt" mimeTypeId="text/plain" createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
+ <ElectronicText dataResourceId="DemoContentProduct" textData="This is the demo data content. There are 3 levels for uploading content: Project Content, Product Content and Product Backlog Content."/>
+ <Content contentId="DemoContentProduct" contentTypeId="DOCUMENT" dataResourceId="DemoContentProduct" statusId="CTNT_INITIAL_DRAFT" contentName="DEMO-CONTENT" mimeTypeId="text/plain" createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
<ProductContent productId="DEMO-PRODUCT-1" contentId="DemoContentProduct" productContentTypeId="SPECIFICATION" fromDate="2010-11-01 13:35:34.751"/>
<!-- Demo Backlog Content -->
- <DataResource dataResourceId="DemoContentBacklog" dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="NONE" statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.xml" mimeTypeId="application/octet-stream" objectInfo="component://scrum/data/helpdata/DEMO-CONTENT.xml" createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
- <Content contentId="DemoContentBacklog" contentTypeId="DOCUMENT" dataResourceId="DemoContentBacklog" statusId="CTNT_INITIAL_DRAFT" contentName="DEMO-CONTENT" mimeTypeId="application/octet-stream" createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="DemoContentBacklog" dataResourceTypeId="ELECTRONIC_TEXT" dataTemplateTypeId="NONE" statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.txt" mimeTypeId="text/plain" createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
+ <ElectronicText dataResourceId="DemoContentBacklog" textData="This is the demo data content. There are 3 levels for uploading content: Project Content, Product Content and Product Backlog Content."/>
+ <Content contentId="DemoContentBacklog" contentTypeId="DOCUMENT" dataResourceId="DemoContentBacklog" statusId="CTNT_INITIAL_DRAFT" contentName="DEMO-CONTENT" mimeTypeId="text/plain" createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
<CustRequestContent custRequestId="TEST1" contentId="DemoContentBacklog" fromDate="2010-11-02 10:37:42.358"/>
<!-- Demo Project Content -->
- <DataResource dataResourceId="DemoContentProject" dataResourceTypeId="LOCAL_FILE" dataTemplateTypeId="NONE" statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.xml" mimeTypeId="application/octet-stream" objectInfo="component://scrum/data/helpdata/DEMO-CONTENT.xml" createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
- <Content contentId="DemoContentProject" contentTypeId="DOCUMENT" dataResourceId="DemoContentProject" statusId="CTNT_INITIAL_DRAFT" contentName="DEMO-CONTENT" mimeTypeId="application/octet-stream" createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
+ <DataResource dataResourceId="DemoContentProject" dataResourceTypeId="ELECTRONIC_TEXT" dataTemplateTypeId="NONE" statusId="CTNT_IN_PROGRESS" dataResourceName="DEMO-CONTENT.txt" mimeTypeId="text/plain" createdDate="2010-11-01 13:35:33.211" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:33.211" lastModifiedByUserLogin="admin"/>
+ <ElectronicText dataResourceId="DemoContentProject" textData="This is the demo data content. There are 3 levels for uploading content: Project Content, Product Content and Product Backlog Content."/>
+ <Content contentId="DemoContentProject" contentTypeId="DOCUMENT" dataResourceId="DemoContentProject" statusId="CTNT_INITIAL_DRAFT" contentName="DEMO-CONTENT" mimeTypeId="text/plain" createdDate="2010-11-01 13:35:34.357" createdByUserLogin="admin" lastModifiedDate="2010-11-01 13:35:35.486" lastModifiedByUserLogin="admin"/>
<WorkEffortContent workEffortId="DEMO-PROJECT-1" contentId="DemoContentProject" workEffortContentTypeId="PROJECT_SPEC" fromDate="2010-11-05 15:50:39.392"/>
</entity-engine-xml>