You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "Jacques Le Roux (Jira)" <ji...@apache.org> on 2021/09/20 16:18:00 UTC
[jira] [Closed] (OFBIZ-12324) Create a deny list to reject webshell
tokens
[ https://issues.apache.org/jira/browse/OFBIZ-12324?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jacques Le Roux closed OFBIZ-12324.
-----------------------------------
Fix Version/s: Release Branch 17.12
18.12.01
Resolution: Implemented
> Create a deny list to reject webshell tokens
> --------------------------------------------
>
> Key: OFBIZ-12324
> URL: https://issues.apache.org/jira/browse/OFBIZ-12324
> Project: OFBiz
> Issue Type: Improvement
> Components: framework/security
> Affects Versions: Trunk
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Minor
> Fix For: 18.12.01, Release Branch 17.12
>
>
> In OFBIZ-12305 I said
> bq. Somehow related: I'll also soon extract the list of words used in SecuredUpload::isValidText in a deniedWebShellWords property in security.properties
> This is it
--
This message was sent by Atlassian Jira
(v8.3.4#803005)