You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ofbiz.apache.org by "Adrian Crum (JIRA)" <ji...@apache.org> on 2015/04/09 08:51:12 UTC

[jira] [Commented] (OFBIZ-6235) Have FlexibleStringExpander applied to scripts in screens

    [ https://issues.apache.org/jira/browse/OFBIZ-6235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14486848#comment-14486848 ] 

Adrian Crum commented on OFBIZ-6235:
------------------------------------

A feature like that could be used as an attack vector.

> Have FlexibleStringExpander applied to scripts in screens
> ---------------------------------------------------------
>
>                 Key: OFBIZ-6235
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-6235
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Pierre Smits
>            Priority: Minor
>
> Currently the FlexibleStringExpander is applied when a ${value} is included in various elements in screens and forms.
> However it isn't possible to use a ${value} in the name or location of a script. Having this would make screens and forms more flexible.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)