This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release18.12 by this push:
new 45afc27d2d Improved: Adds some tokens to deniedWebShellTokens and
updates webShellTokensTesting
45afc27d2d is described below
commit 45afc27d2df1aa739d08e5a96be08071c6186d4d
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Fri Jun 7 11:49:43 2024 +0200
Improved: Adds some tokens to deniedWebShellTokens and updates
webShellTokensTesting
"touch" was there already, just not at the same place than in trunk
---
framework/security/config/security.properties | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/framework/security/config/security.properties
b/framework/security/config/security.properties
index bc5210dd23..0a0cc534fa 100644
--- a/framework/security/config/security.properties
+++ b/framework/security/config/security.properties
@@ -240,7 +240,7 @@
deniedWebShellTokens=java.,beans,freemarker,<script,javascript,<body,body ,<form
chmod,mkdir,fopen,fclose,new
file,upload,getfilename,download,getoutputstring,readfile,iframe,object,embed,onload,build,\
python,perl ,/perl,ruby
,/ruby,process,function,class,InputStream,to_server,wget
,static,assign,webappPath,\
ifconfig,route,crontab,netstat,uname
,hostname,iptables,whoami,"cmd",*cmd|,+cmd|,=cmd|,localhost,thread,require,gzdeflate,\
- execute,println,calc,touch,calculate,touch,curl
+ execute,println,calc,touch,calculate,curl
#-- Max line length for uploaded files, by default 10000
maxLineLength=
