This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git
The following commit(s) were added to refs/heads/trunk by this push:
new f81217531 Improved: Better secure "openSourceFile" request-map
(OFBIZ-13316)
f81217531 is described below
commit f8121753152a9317c302731e346475958984ffee
Author: Jacques Le Roux <[email protected]>
AuthorDate: Wed Nov 19 17:58:01 2025 +0100
Improved: Better secure "openSourceFile" request-map (OFBIZ-13316)
See OFBIZ-12018
---
ecommerce/webapp/ecommerce/WEB-INF/controller.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
b/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
index 1992d9d73..3d7fa706b 100644
--- a/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
+++ b/ecommerce/webapp/ecommerce/WEB-INF/controller.xml
@@ -185,7 +185,7 @@ under the License.
<!-- open the corresponding FTL file with IDE when the named border is
clicked from browser -->
<request-map uri="openSourceFile">
- <security https="false" auth="false"/>
+ <security https="true" auth="true"/>
<event type="java" path="org.apache.ofbiz.common.CommonEvents"
invoke="openSourceFile"/>
<response name="success" type="none" />
<response name="error" type="none" />
