| commit | d7a022155ac6ce613477b081931eea0e1289b68b | [log] [tgz] |
|---|---|---|
| author | Jacques Le Roux <jacques.le.roux@les7arts.com> | Fri Dec 13 06:38:50 2024 +0100 |
| committer | Jacques Le Roux <jacques.le.roux@les7arts.com> | Fri Dec 13 07:45:59 2024 +0100 |
| tree | ab2cae1c1cfa5d3b1d54f61562a9a4cca34443a7 | |
| parent | faf6032b015a7be1380281a784253d1790ac5ff6 [diff] |
Fixed: Prevent URL parameters manipulation (OFBIZ-13147)
When using "requirement" in URI the "require" token in security.properties
blocks the URL. Actually we need "require(" not "require":
https://gist.github.com/khakimov/5130151