commit f8121753152a9317c302731e346475958984ffee
author Jacques Le Roux <jacques.le.roux@les7arts.com> Wed Nov 19 17:58:01 2025 +0100
committer Jacques Le Roux <jacques.le.roux@les7arts.com> Wed Nov 19 17:58:01 2025 +0100
tree 35144cb6fb65e06650e2c2c00e30c194d1ee5c4a
parent 8ccab444581cf9657e9adc981d3d6832fb4d1742

Improved: Better secure "openSourceFile" request-map  (OFBIZ-13316)

See OFBIZ-12018

ecommerce/webapp/ecommerce/WEB-INF/controller.xml

diff --git a/ecommerce/webapp/ecommerce/WEB-INF/controller.xml b/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
index 1992d9d..3d7fa70 100644
--- a/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
+++ b/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
@@ -185,7 +185,7 @@
 
     <!-- open the corresponding FTL file with IDE when the named border is clicked from browser -->
     <request-map uri="openSourceFile">
-        <security https="false" auth="false"/>
+        <security https="true" auth="true"/>
         <event type="java" path="org.apache.ofbiz.common.CommonEvents" invoke="openSourceFile"/>
         <response name="success" type="none" />
         <response name="error" type="none" />