This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 82ed9a8d4d Fixed: OFBiz entity import screen is broken (OFBIZ-13308)
82ed9a8d4d is described below
commit 82ed9a8d4dbf3259cb3d8bc219d36206d160b339
Author: Jacques Le Roux <[email protected]>
AuthorDate: Tue Oct 28 05:27:25 2025 +0100
Fixed: OFBiz entity import screen is broken (OFBIZ-13308)
The fix is easy, just bypass the "Prevents stream exploitation" block like
for
EntityImport.This is the same than the previous commit.
---
.../src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git
a/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java
b/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java
index eb67e8ce7a..b604dbb59d 100644
---
a/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java
+++
b/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/ControlFilter.java
@@ -170,8 +170,9 @@ public class ControlFilter extends HttpFilter {
String context = req.getContextPath();
HttpSession session = req.getSession();
boolean isEntityImport =
req.getRequestURI().equals("/webtools/control/entityImport");
+ boolean isProgramExport =
req.getRequestURI().equals("/webtools/control/ProgramExport");
- if (!(isControlFilterTests() || isEntityImport)) {
+ if (!(isControlFilterTests() || isEntityImport || isProgramExport)) {
// Prevents stream exploitation
UrlServletHelper.setRequestAttributes(req, null,
req.getServletContext());
Map<String, Object> parameters = UtilHttp.getParameterMap(req);