Author: jleroux
Date: Fri May 24 17:15:04 2019
New Revision: 1859893
URL: http://svn.apache.org/viewvc?rev=1859893&view=rev
Log:
Fixed: Services allow arbitrary HTML for parameters with allow-html set to
"safe"
(OFBIZ-5254)
Once again forgot to commit this changes in plugins :/
Modified:
ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml
Modified: ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml
URL:
http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml?rev=1859893&r1=1859892&r2=1859893&view=diff
==============================================================================
--- ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml (original)
+++ ofbiz/ofbiz-plugins/trunk/ebaystore/servicedef/services.xml Fri May 24
17:15:04 2019
@@ -491,7 +491,7 @@ under the License.
<attribute name="itemId" mode="IN" type="String" optional="false"/>
<attribute name="listingType" mode="IN" type="String" optional="true"/>
<attribute name="title" mode="IN" type="String" optional="true"/>
- <attribute name="description" mode="IN" type="String"
allow-html="any"/>
+ <attribute name="description" mode="IN" type="String"
allow-html="safe"/>
<attribute name="price" mode="IN" type="String" optional="true"/>
<attribute name="currencyId" mode="IN" type="String" optional="true"/>
<attribute mode="IN" name="imageData" optional="true"
type="java.nio.ByteBuffer"/>
