You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ofbiz.apache.org by "Christian Carlow (JIRA)" <ji...@apache.org> on 2015/04/23 19:40:38 UTC

[jira] [Created] (OFBIZ-6295) Shoppingcart checkout shipping rules can be hacked

Christian Carlow created OFBIZ-6295:
---------------------------------------

             Summary: Shoppingcart checkout shipping rules can be hacked
                 Key: OFBIZ-6295
                 URL: https://issues.apache.org/jira/browse/OFBIZ-6295
             Project: OFBiz
          Issue Type: Bug
          Components: order
    Affects Versions: Trunk
            Reporter: Christian Carlow


Logic should be added to prevent someone from changing the default values of the shopping cart checkout carrier shipping method radio option value to a shipping method that isn't shown due to rules being broken.  I changed the radio option value using firebug but the order creation succeeded without any error about the shipping method rules being broken.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)