You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by sa...@apache.org on 2011/09/15 12:03:51 UTC
svn commit: r1171028 -
/ofbiz/trunk/framework/common/servicedef/services_test.xml
Author: sascharodekamp
Date: Thu Sep 15 10:03:51 2011
New Revision: 1171028
URL: http://svn.apache.org/viewvc?rev=1171028&view=rev
Log:
FIX: blockingTestScv Service is set to export="true" (https://issues.apache.org/jira/browse/OFBIZ-4417) A patch from Dimitri Unruh which sets the export flag to false: blockingTestScv Service is set to export="true" without any user authorisation. So it is possible to "crash" the whole system.
Modified:
ofbiz/trunk/framework/common/servicedef/services_test.xml
Modified: ofbiz/trunk/framework/common/servicedef/services_test.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/common/servicedef/services_test.xml?rev=1171028&r1=1171027&r2=1171028&view=diff
==============================================================================
--- ofbiz/trunk/framework/common/servicedef/services_test.xml (original)
+++ ofbiz/trunk/framework/common/servicedef/services_test.xml Thu Sep 15 10:03:51 2011
@@ -37,7 +37,7 @@ under the License.
<attribute name="testing" type="org.ofbiz.entity.GenericValue" mode="IN" optional="false"/>
<attribute name="testingNodes" type="List" mode="OUT" optional="true"/>
</service>
- <service name="blockingTestScv" engine="java" export="true" validate="false" require-new-transaction="true" transaction-timeout="20"
+ <service name="blockingTestScv" engine="java" validate="false" require-new-transaction="true" transaction-timeout="20"
location="org.ofbiz.common.CommonServices" invoke="blockingTestService">
<description>Blocking Test service</description>
<attribute name="duration" mode="IN" type="Long" optional="true"/>