This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a change to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
from d1bfb925a9 Improved: Explicitly reject JPEG and GIF uploads with
trailing bytes
new fee4d08f53 Fixed: Prevent redirect bypass in renderDataResourceAsText
URL_RESOURCE path
new 3965d658f9 Fixed: Prevent arbitrary file read/write in entityImport
and entityExportAll
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../ofbiz/content/data/DataResourceWorker.java | 31 ++++++++++++++++++----
.../apache/ofbiz/webtools/WebToolsServices.java | 11 ++++++++
2 files changed, 37 insertions(+), 5 deletions(-)
