You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Nicolas Malin (Jira)" <ji...@apache.org> on 2024/11/15 21:46:00 UTC

[jira] [Created] (OFBIZ-13179) Improve ViewHandler interface

Nicolas Malin created OFBIZ-13179:
-------------------------------------

             Summary: Improve ViewHandler interface
                 Key: OFBIZ-13179
                 URL: https://issues.apache.org/jira/browse/OFBIZ-13179
             Project: OFBiz
          Issue Type: Improvement
          Components: framework
    Affects Versions: 24.09.01
            Reporter: Nicolas Malin
            Assignee: Nicolas Malin


We extend _AbstractViewHandler_ with a new method to override {_}prepareViewContext{_}.
For each view handler implementation this will allow to control context used for rendering, applying Scriptlet token detection for security purpose.

A new class _SecuredFreemarker_ has been created to manage freemarker specific controls, outside of global _SecurityUtil_ class.

We also add a new parameter _secure-context_ (to true by default) to view-map to indicate that this view allow unsecure rendering, this implies the view-map to required authentication. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)