This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a change to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
from b7ce265226 Fixed: Enhance string escaping in MacroScreenRenderer
new 25dfaec580 Improved: Move file path validation to SecurityUtil
new 64acfed4d8 Fixed: Implement file path validation using SecurityUtil in
CoreEvents to enhance security
new e023f5250e Fixed: Integrate SecurityUtil to validate file paths in
CommonEvents for enhanced security
new f3275575d5 Fixed: Remove legacy HttpEngine (disabled 5 years ago for
security reasons)
new 02f4b4589b Fixed: Cast parse result to int in EntityDataLoader
new 58de07fbfd Fixed: Cast parse result to int in EntityXmlAssertTest
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../ofbiz/content/data/DataResourceWorker.java | 79 +-------
.../java/org/apache/ofbiz/common/CommonEvents.java | 5 +-
.../apache/ofbiz/entity/util/EntityDataLoader.java | 2 +-
.../org/apache/ofbiz/security/SecurityUtil.java | 74 ++++++++
framework/service/config/serviceengine.xml | 1 -
.../apache/ofbiz/service/engine/HttpEngine.java | 210 ---------------------
.../ofbiz/testtools/EntityXmlAssertTest.java | 2 +-
.../org/apache/ofbiz/webapp/event/CoreEvents.java | 8 +
.../webapp/webtools/WEB-INF/controller.xml | 8 +-
9 files changed, 95 insertions(+), 294 deletions(-)
delete mode 100644
framework/service/src/main/java/org/apache/ofbiz/service/engine/HttpEngine.java
