| commit | 7de28070a356fd5a02a05d986a235fcc3f7f737a | [log] [tgz] |
|---|---|---|
| author | Jacques Le Roux <jacques.le.roux@les7arts.com> | Sun Oct 10 13:32:49 2021 +0200 |
| committer | Jacques Le Roux <jacques.le.roux@les7arts.com> | Mon Oct 11 09:44:45 2021 +0200 |
| tree | 093b43f914f0960e2b3dbada94f2459ea32a1f6e | |
| parent | c859c6f63664ddc12f1ea19355af52d4710ba385 [diff] |
Improved: post-auth Remote Code Execution Vulnerability (OFBIZ-12332) Prevents an useless inevitable warning by commenting out RequestWrapper::getParameterNames and with it all the unused methods in RequestWrapper class Also better comments CacheFilter::doFilter by giving its real and only goal: <<to prevent a post-auth security issue described in OFBIZ-12332>>