You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "Krishnauprit18 (via GitHub)" <gi...@apache.org> on 2026/08/24 05:40:59 UTC
[PR] Improved: escape link parameter values in MacroScreenRenderer.renderLink [ofbiz-framework]
Krishnauprit18 opened a new pull request, #1711:
URL: https://github.com/apache/ofbiz-framework/pull/1711
- Parameter names and values were appended to the generated FTL macro call without escaping. Added escapeFtlSingleQuoted() to escape these values before they are embedded in the macro string, consistent with escaping already used elsewhere in this class.
- Corrected existing escaping in the other executeMacro overload, which escaped a lone dollar sign with a backslash - not a valid FTL string escape, and one that failed to parse for any value containing a plain "$". Escaping the following brace instead is sufficient and valid syntax.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved: escape link parameter values in MacroScreenRenderer.renderLink [ofbiz-framework]
Posted by "ashishvijaywargiya (via GitHub)" <gi...@apache.org>.
ashishvijaywargiya merged PR #1711:
URL: https://github.com/apache/ofbiz-framework/pull/1711
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved: escape link parameter values in MacroScreenRenderer.renderLink [ofbiz-framework]
Posted by "jacopoc (via GitHub) via notifications" <no...@ofbiz.apache.org>.
jacopoc commented on PR #1711:
URL: https://github.com/apache/ofbiz-framework/pull/1711#issuecomment-6637643398
CVE-2026-82910
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org