You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "jacopoc (via GitHub)" <gi...@apache.org> on 2026/03/11 07:41:12 UTC

[PR] Improved: Enhance file upload validation with allowlist and path checks [ofbiz-framework]

jacopoc opened a new pull request, #979:
URL: https://github.com/apache/ofbiz-framework/pull/979

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Improved: Enhance file upload validation with allowlist and path checks [ofbiz-framework]

Posted by "jacopoc (via GitHub)" <gi...@apache.org>.
jacopoc merged PR #979:
URL: https://github.com/apache/ofbiz-framework/pull/979


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Improved: Enhance file upload validation with allowlist and path checks [ofbiz-framework]

Posted by "jacopoc (via GitHub)" <gi...@apache.org>.
jacopoc commented on PR #979:
URL: https://github.com/apache/ofbiz-framework/pull/979#issuecomment-4060184563

   Hi @JacquesLeRoux indeed you are right! There is still some room left for human interaction nowadays :-)
   Thanks for your review.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Improved: Enhance file upload validation with allowlist and path checks [ofbiz-framework]

Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #979:
URL: https://github.com/apache/ofbiz-framework/pull/979#issuecomment-4037146486

   ## [![Quality Gate Failed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-failed-20px.png 'Quality Gate Failed')](https://sonarcloud.io/dashboard?id=apache_ofbiz-framework&pullRequest=979) **Quality Gate failed**  
   Failed conditions  
   ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/failed-16px.png '') [77.8% Duplication on New Code](https://sonarcloud.io/component_measures?id=apache_ofbiz-framework&pullRequest=979&metric=new_duplicated_lines_density&view=list) (required ≤ 3%)  
     
   [See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_ofbiz-framework&pullRequest=979)
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Improved: Enhance file upload validation with allowlist and path checks [ofbiz-framework]

Posted by "JacquesLeRoux (via GitHub)" <gi...@apache.org>.
JacquesLeRoux commented on PR #979:
URL: https://github.com/apache/ofbiz-framework/pull/979#issuecomment-4060173456

   Hi @jacopoc,
   
   I reviewed, not tested. Anyway it's clearly OK with me
   
   BTW, SonarQube said the same than me about duplication. The difference is you can't explain to it the same you did with me :)
   
   Thanks for your work
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Improved: Enhance file upload validation with allowlist and path checks [ofbiz-framework]

Posted by "golja (via GitHub)" <gi...@apache.org>.
golja commented on PR #979:
URL: https://github.com/apache/ofbiz-framework/pull/979#issuecomment-4959623519

   CVE-2026-31379


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org