[jira] [Commented] (OFBIZ-12324) Create a deny list to reject webshell tokens

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OFBIZ-12324?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17491965#comment-17491965 ] 

ASF subversion and git services commented on OFBIZ-12324:
---------------------------------------------------------

Commit 2e0a6e4f8c7eab963284160d9f04be610224f981 in ofbiz-framework's branch refs/heads/trunk from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=2e0a6e4 ]

Improved: Create a deny list to reject webshell tokens (OFBIZ-12324)

OK, as ever I did not commit build.gradle because I have to have it
assume-unchanged with node.js version 13.14.0, I'm an outlaw


> Create a deny list to reject webshell tokens
> --------------------------------------------
>
>                 Key: OFBIZ-12324
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12324
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework/security
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Minor
>             Fix For: Release Branch 17.12, 18.12.01
>
>
> In OFBIZ-12305 I said
> bq. Somehow related: I'll also soon extract the list of words used in SecuredUpload::isValidText in a deniedWebShellWords property in security.properties
> This is it



--
This message was sent by Atlassian Jira
(v8.20.1#820001)