This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a change to branch
dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/jquery-4.0.0
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
discard 57f2a82c61 Bump jquery in /themes/common-theme/webapp/common-theme/js
add 414bfbf8c0 Copy GitHub workflow definition files from the default
branch (trunk) since they now work correctly in any branch without modification
add f3eb36cbed Bump actions/upload-artifact from 4.3.1 to 7.0.0
add cb85da4a53 Bump actions/setup-java from 4.0.0 to 5.2.0
add 2e5ee287e2 Fixed: generateSecretKeys task no longer overwrites
already-set keys
add ba67970edd Improved: Extend URL_RESOURCE validation to
writeDataResourceText, completing the work of af8ee514a2
add 2ceca30526 Fixed:Include handling for rejected quantities in
cancelRemaingPurchaseOrderItems service (OFBIZ-13373) (#985)
add ee80b93ae3 Bump github/codeql-action from 4.34.1 to 4.35.0 (#1035)
add 7ba83c42a2 Improved: ERR_TOO_MANY_REDIRECTS on demos (OFBIZ-13363)
add d0d01d8b94 Fixed: PO receipts with zero accepted units are not handled
correctly (OFBIZ-13376) (#1027)
add 5c5f8e90c8 Improved: Add CORS origins configuration for API security
policy
add 62d18ec24c Bump github/codeql-action from 4.35.0 to 4.35.1
add 2161ad15bc Improved: introduce and use a new label for product
receipts with zero accepted and rejected units (OFBIZ-13376) (#1043)
add d8f7b2346d Fixed: Remove unnecessary string expansion for email
subject and body in EmailServices
add 5caa820f66 Fixed: Simplify permission checks for email and comment
note communication events in PartyPermissionServices
add 3c49c448d7 Bump the all-dependencies group with 55 updates
add e22e7a926f Fixed: post-Dependabot bump compilation and runtime errors
add be2e4a718d Improved: Update url of Groovy javadocs
add 44a97f37c5 Improved: Replace iText by librePDF (OFBIZ-13300)
add bad956bb62 Fix: Update url for java 17 javadocs
add 980e6f5e2b Fixed: Not possible to add product to Promo Action Rule
(OFBIZ-13379)
add 64dd4ae2d2 Fixed: Pressing sort button in any UI view will end with
NPE (OFBIZ-13378)
add ff4325133c Fixed: Update Gradle wrapper to version 7.6.6 and adjust
checksums
add 7680f74472 Fixed: Update init-gradle-wrapper.ps1 to version 7.6.6
add 205d053fef Fixed: Add spring-web version 5.3.39 to dependencies.gradle
for testing framework-only deployments
add 90c72d64a2 Improved: Remove gradle-wrapper.jar from the repository and
enhance the init-gradle-wrapper scripts to download and verify the version
specified in gradle-wrapper.properties
add 788c98d79f Fixed: Update Dockerfile to copy gradle-wrapper.properties
and remove unnecessary sed command
add 539dfa860f Fixed: Add init-gradle-wrapper.sh execution step to CI
workflow
add 4123861ce5 Fixed: remove generateSecretKeys dependency from test to
improve build caching
add f56bcd7721 Fixed: Move checkContextFileBoundary call to ensure file
boundary is checked before existence check
add 8d3153baa9 Fixed: Update checkContextFileBoundary method visibility
and ensure it is called in DataServices to validate file paths
add bc6eaff9fd Fixed: Enhance error logging in ICalConverter for service
invocation failures
add 2272be7d2d Fixed: Replace RandomStringUtils with custom salt
generation in HashCrypt for enhanced security
add 1a59fb1106 Fixed: Derive servlet path from trusted _CONTROL_PATH_
request attribute to enhance security against user-influenced input
add 7e9f93e33d Fixed: Validate last view name input in RequestHandler to
enhance security and prevent user manipulation
add a41476c4f8 Fixed: Ensure that the invoice item quantity is set to 1
only if the quantity is null when invoice items are created by the
createInvoiceItem service (OFBIZ-13362)
add ed603dc87b Fixed: Avoid displaying quantities equal to zero as 1 in
the invoice items grid of the View Invoice screen (OFBIZ-13362)
add b7ce265226 Fixed: Enhance string escaping in MacroScreenRenderer
add 25dfaec580 Improved: Move file path validation to SecurityUtil
add 64acfed4d8 Fixed: Implement file path validation using SecurityUtil in
CoreEvents to enhance security
add e023f5250e Fixed: Integrate SecurityUtil to validate file paths in
CommonEvents for enhanced security
add f3275575d5 Fixed: Remove legacy HttpEngine (disabled 5 years ago for
security reasons)
add 02f4b4589b Fixed: Cast parse result to int in EntityDataLoader
add 58de07fbfd Fixed: Cast parse result to int in EntityXmlAssertTest
add c5724f398e Fixed: [SECURITY] Several CVEs in Apache Tomcat
(OFBIZ-13381)
add ce46d65660 Add ASF allowlist check workflow
add 4adb61cb12 Rename workflow files from .yaml to .yml for consistency
and compatibility with the new asf-allowlist-check.yml workflow
add 2bc7dab04b Restrict ASF allowlist checks to main branches only
add ed6e0f9f00 Bump docker/login-action from 4.0.0 to 4.1.0
add 4b9526cbe2 Fixed: Update Gradle wrapper to version 8.14.4
add 2199981bbd Backported: Refactor boolean assignments to comply with
codestyle rules
add 528ed7e13c Fixed: Increase memory for checkstyleMain to support Gradle
8+
add 0fe2fcd7fd Fixed: Modify property assignments in build.gradle to fix
warning messages
add e267007f08 Fixed: Remove org.asciidoctor.jvm.pdf that doesn't work
since several months and is incompatible with the current version of Gradle and
its plugins
add 1880901752 Fixed: Clean up commented-out plugin line
add b25f6037d5 Fixed: Disable the unused CrapMetric rule.
add 9f5b043b58 Fixed: Update AsciidoctorTask configuration to use the new
API
add e4ee36e1c7 Bump actions/upload-artifact from 7.0.0 to 7.0.1
add 6f6bf46098 Bump org.apache.logging.log4j:log4j-core from 2.25.3 to
2.25.4
add 0f48dc0f34 Fixed: Issue on Create New Shipment Screen after page
re-loading on e… (#1105)
add 1d6d655a75 Fixed: Possible NPE in PayPal services (OFBIZ-13385)
add 4ede6be62a Fixed: Accounting - New Agreement shows wrong form
(OFBIZ-13384)
add c24ec27aff Fixed: Possible NPE in PayPal services (OFBIZ-13385)
add 205739bbb9 Improved: Possible NPE in PayPal services (OFBIZ-13385)
add 1add6d4517 Bump github/codeql-action from 4.35.1 to 4.35.2
add 1e98f658ee Bump com.drewnoakes:metadata-extractor from 2.19.0 to 2.20.0
add 6758dfd784 Bump Apache Derby to version 10.16.1.1
add b034fc3392 Bump com.gradle.common-custom-user-data-gradle-plugin
add cc85d8eccc Fixed: Update StartupCommandUtil to fix warning messages
for usage of deprecated methods in the org.apache.commons.cli library
add afd2c1a294 Fixed: Replace deprecated StringUtils methods with native
string operations to resolve compilation warnings
add ec2b92e48f Fixed: Update CSVFormat usage to resolve compilation
warnings
add 65c1769811 Fixed: Remove deprecated use of AccessController in
AuthHelper to resolve compilation warnings
add e381c45ed8 Fixed: Update context data handling in
OFBizDynamicThresholdFilter to resolve compilation warnings
add 548440099c Improved: getFields() in AcroFields has been deprecated
(OFBIZ-13312)
add f31511788c Fixed: Update import statement for GroovyTestCase to
resolve compilation warnings
add 397af6a3fe Bump org.apache.ant:ant-junit from 1.10.15 to 1.10.17
add df64acd003 Fixed: Remove support for serialization and deserialization
of custom Java objects in XmlSerializer for security reasons
add 3d82a5f70b Fixed: Prevent deserialization of untrusted data in JMS
listener - Restrict XStream allowlist in UtilXml to the exact types handled by
XmlSerializer.serializeSingle - Replace the broad java..* and
org.apache.ofbiz..* wildcards in SafeObjectInputStream with an explicit
minimal allowlist of the same safe types - Move the isExport() authorization
check before XmlSerializer.deserialize in AbstractJmsListener.runService so
gadget chains cannot fire for non-exporte [...]
add 1900b6d74c Fixed: Remove references to the no more used
'sun.util.calendar.*' package from (commented out) JVM argument and from
serialization allow list
add 050ef8e097 Fixed: Extend allowlist in SafeObjectInputStream to include
GString* Groovy classes
add dccd4a0c8d Fixed: Escape username in DN template
add f03c24657e Fixed: Replace ObjectInputStream with SafeObjectInputStream
for safer JDBC object deserialization
add 225d2caa61 Fixed: Enhance parsing security by disabling external
entity resolution
add 3ddc59666f Fixed: Implement path traversal protection in OutputServices
add a9a3237fe9 Improved: Update allowed local file paths to enhance
security
add eb6c54aba6 Reverted: commit 6e8d8620ac
add 23bac92261 Fixed: Enhance XML processing security by disabling
external entity resolution across multiple classes
add 86c6f3a4f4 Fixed: Wrap setAttribute(ACCESS_EXTERNAL_DTD, ...) calls to
catch IllegalArgumentException thrown by older versions of Xalan/Saxon that
predate JAXP 1.5
add ee3a7627d8 Fixed issue in reCreateOrderAdjustment service on adding
promo item after cancel order item request. (#1137)
add bd93590daa Fixed: we mostly no longer use yaml files, notably for
gradle.yml
add 33ad46dc33 Bump com.fasterxml.jackson.core:jackson-databind from
2.21.2 to 2.21.3
add 792c0eaeae Bump docker/build-push-action from 7.0.0 to 7.1.0
add b2bfd19391 Bump com.auth0:java-jwt from 4.5.1 to 4.5.2
add 10653de891 Bump github/codeql-action from 4.35.2 to 4.35.3
add 8a72ba31ab Improve FTL data resource rendering restrictions (#1156)
add f1f102df64 Improved: Lookup don't work on area just updated
(OFBIZ-13332)
add 8852cc04db Fixed: Path traversal via productId in
ImageManagementServices
add 53b47a5978 Fixed: Inspect all IDAT chunks and reject trailing bytes in
noWebshellInPNG
add d1bfb925a9 Improved: Explicitly reject JPEG and GIF uploads with
trailing bytes
add fee4d08f53 Fixed: Prevent redirect bypass in renderDataResourceAsText
URL_RESOURCE path
add 3965d658f9 Fixed: Prevent arbitrary file read/write in entityImport
and entityExportAll
add 30c83b92f4 Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to
3.2.4
add d094e5a411 Fixed: Improve file path validation to work with mounted
directories
add 4a37946273 Move order PDF link to header actions for 24.09 (#1179)
add e24cb5da3e OFBIZ-12561 Remove duplicate payment find action (#1184)
add 1481a41959 Fixed payment accounting transaction PDF route for 24.09
(OFBIZ-12818) (#1189)
add b01e1f46b4 Fixed: IndexOutOfBoundsException in UtilHttp for unlisted
TLDs (OFBIZ-13389) (#1186)
add c91d238a86 Fixed: Add permission check for runAsSystemUser in
CoreEvents
add f807928a40 Bump github/codeql-action from 4.35.3 to 4.35.4
add 4ed7011a24 Ofbiz 13374 Fixed: incorrect Groovy range iteration that
was causing index out of bounds (#1177)
add 3aeb79c7ca Fixed: Update permission checks in CommonScreens.xml for
webtools access
add 66f334d5e8 Fixed: Add sun.util.calendar.ZoneInfo to allowList in
SafeObjectInputStream configuration
add e456b65f89 Fixed: Add permission checks for SERVICE_MAINT in
CoreEvents to enhance security
add ae45e302cf Fixed production run cost calculation logic to consider
returned items in material cost calculation. (#1182)
add 13653e675f Bump actions/dependency-review-action from 4.9.0 to 5.0.0
add e1ab3877c6 Fixed: Implement permission checks for ENTITY_MAINT in
EntitySQLProcessor and ProgramExport
add 124844ee28 Fixed: Remove unnecessary requirePasswordChange parameter
from ChangePassword forms and adjust login workflow accordingly
add 1fbfa23e08 Fixed: Enable indirect import checks and remove Object from
receivers whitelist in ProgramExport for enhanced security
add 81135b4fb1 Bump gradle-wrapper from 8.14.4 to 8.14.5
add efae5a1523 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add 1313960509 Bump Tomcat dependencies from 9.0.117 to 9.0.118
add e3a8b06ff7 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add ef7c0eed2b Fixed: Remove unused content services traverseContent and
findContentParents
add 95c86abe17 Fixed: Remove unused traverse method from ContentWorker
class
add dc812fb177 Fixed: Add ProductStoreWorker.getRandomSurveyWrapper to
FreeMarker whitelist
add a51a2933d3 Fixed: Remove unused imports and comment out potentially
risky logic in ContentWorker class
add b05b9db73e Fixed: sets org.asciidoctor.jvm plugins to version "4.0.5"
add 25b27902c8 Fixed: sets org.asciidoctor.jvm plugins to version "4.0.5"
add 9e9b75c693 Bump github/codeql-action from 4.35.4 to 4.35.5
add db54a10100 Fixed: sets org.asciidoctor.jvm plugins to version "4.0.5"
add 79ec7da2b9 Fixed: Order view page CSS leak from embedded email
communication content (OFBIZ-13390) (#1214)
add 906bdb72e6 No functional change to now remove useless files on
nigthlies
add db59cb5671 Fixed FreeMarker template resolution issue when OFBiz
installation or component paths contain spaces (OFBIZ-10434) (#1226)
add bcf307bda4 Replace generic updateOrRemove service with
ProductFeatureDataResource-specific service (#1227)
add 85f74d6144 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add f8da96b6eb Fixed: error on the find party screen. (OFBIZ-10824) (#1215)
add 2e47147695 Recurring Job Not Rescheduled After Server Restart/Crash
(OFBIZ-13370) (#1234)
add dcc5b3b29f Corrected invalid StatusItem key in OrderForms
(OFBIZ-13420) (#1239)
add eb4282a5ff Bump github/codeql-action from 4.35.5 to 4.36.0
add 342866c3dc Fixed: Accounting Transaction CSV Export functionality by
using organizationPartyId from application decorator (OFBIZ-12111) (#1252)
add 0517009fa3 Bump docker/build-push-action from 7.1.0 to 7.2.0
add a197ee1ab5 Bump docker/login-action from 4.1.0 to 4.2.0
add eeac1cd358 Bump docker/metadata-action from 6.0.0 to 6.1.0
add 0912fc2534 Fixed: Add ProductQtyAccepted label for 'Quantity Accepted'
in Product component and replace ProductQtyReceived with ProductQtyAccepted in
ReceiveInventory screen
add add97930a7 Fixed: Correct receivedQuantity calculation in
updatePurchaseShipmentFromReceipt by including quantityRejected
add 6e2d9f431e Fixed: Remove the USPS Mock ShippingAPI servlet
add a049ec2105 Fixed: Set secure flag for cookies in TrackingCodeEvents,
ShoppingListEvents, and LoginWorker
add 7b2c8c2b6c Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add fad731874c Fixed: Fix regex pattern matching to escape special
characters in fragment name
add 60ccde9011 Fixed: Deserializing ModelPermission.java throws an error
(OFBIZ-13423) (#1262)
add 01c7268b9a Fixed: Wrong OrderAdjustments (because of tax) when
cancelling an Order (OFBIZ-9205) (#1291)
add c6da0ce643 Fixed: view-entity complex-alias field name bug when
view-entities reference other view-entities (OFBIZ-5315) (#1282)
add 7620be8f0f Fixed: DATASPD_MEASURE has incorrect conversionFactors
(OFBIZ-4251) (#1253)
add 51474b7c9b Improved: FreeMarkerViewHandler should load templates via
the FreeMarkerWorker (OFBIZ-3546) (#1257)
add 48b11fde89 Fixed: EntityDateFilterCondition causes the entity cache to
return false matches (OFBIZ-3880) (#1272)
add 62b1f80595 Improved: Add javadoc option to suppress missing
documentation warnings
add 123c8b47fb Fixed: Remove unnecessary Javadoc paragraph tags
add 05a534b4e2 Improved: Add comment for Javadoc option and remove
commented out option
add 0ea564b228 Improved: Check and enhance the Javadoc rules/documentation
for the project (OFBIZ-9148)
add c53b39f3d8 Improved: Check and enhance the Javadoc rules/documentation
for the project (OFBIZ-9148)
add c617cd567e Removed: Deprecated EntityDateFilterCondition references
from EntityConditionVisitor and EntityConditionVisitorTests (OFBIZ-3880) (#1312)
add 676ad0ab74 Bump github/codeql-action from 4.36.0 to 4.36.1
add f171dfdeac Bump actions/checkout from 6.0.2 to 6.0.3
add c9c39383ca Fixed: Enhance security by requiring authentication for
WebSiteContactList operations
add 763962cb07 Fixed: Correct receivedQuantity calculation in
getReceivedQuantityForOrderItem by including quantityRejected
add a8f9637e0f Improved: Refactor getReceiveQuantityForOrderItem and add
checks for null quantities
add 4cad9a2907 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add 138175efcb Add unrestricted security permissions for Content Manager
operations
add 0d9a551daa Implement special permission handling for DataResource CRUD
operations when the dataTemplateTypeId attribute is set
add a826b1a759 Refactor DataResource permission handling to use
genericBasePermissionCheck service instead of the deprecated Minilang method
add 7fa86d7e9e Fixed: correct content of the 'View Shipment Receipts'
screenlet in the ViewShipment screen
add 15c84b0ef0 Fixed: Used correct signature of makeValidContext method to
prepare context for running the sendMailFromScreen service. (OFBIZ-13388)
(#1336)
add 002640444d Bump github/codeql-action from 4.36.1 to 4.36.2
add 42819e5ae1 Fixed: Enhance DataResource permission checks to include
dataTemplateTypeId validation when updating an existing record
add 442dfd12b3 Fixed: Invoice import is not visible from UI and not
working (OFBIZ- 12089) (#1332)
add 50700f668b Fixed: duplicate QuoteRole insertion error in copyQuote
service (OFBIZ-13436) (#1347)
add 13cff1fedc Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add 721c7e06bd Disable Quick Receive and Receive buttons on the Order View
page when a PO has multiple ship groups
add 1b637b475d Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add 7ed63877cf Bump actions/setup-java from 5.2.0 to 5.3.0
add fdfc2f061f OFBIZ-13402 Move test sources from src/main/groovy to
src/test/groovy
add a185b03b9c OFBIZ-13402 Fix path separators and add explicit JUnit test
dependency
add f2bd7319ca Bump actions/checkout from 6.0.3 to 7.0.0
add c8e1604294 Bump github/codeql-action/upload-sarif
add 61000bc75b Bump actions/setup-java from 5.3.0 to 5.4.0
add 5b3cc9f615 Improved: Simplify handling of hidden fields in order
search form
add a3909b1d4c Fixed: Add order type check for gift message display logic
in order view screen
add 67ef1ef514 Fixed: Replace link with submit button for receiving
purchase orders in OrderShippingInfo.ftl when a shipment has not been created
yet
add 7c19b4e31e Fixed: Correct indentation in OrderShippingInfo.ftl
add daf6e11212 Fixed: Replace links with submit inputs in
OrderShippingInfo.ftl for the 'Quick Receive Purchase Order' and 'Receive'
actions displayed when a shipment has already been created
add ec65c5ad76 Improved: Apply common label and form alignment in the
Receive Inventory screen and remove unnecessary colons from labels
add 3241af2969 Bump github/codeql-action/upload-sarif
add a1b2b9cdd4 Bump docker/login-action from 4.2.0 to 4.3.0
add 548a39f9d3 Bump docker/build-push-action from 7.2.0 to 7.3.0
add 3a90e0fa29 Bump github/codeql-action/init from 4.36.2 to 4.36.3
add 644fd624bc Bump github/codeql-action/autobuild from 4.36.2 to 4.36.3
add a356b29ad1 Bump github/codeql-action/analyze from 4.36.2 to 4.36.3
add dc485a5e4b Bump docker/metadata-action from 6.1.0 to 6.2.0
add 833821518e Bump docker/login-action from 4.3.0 to 4.4.0
add fa8d3d15f0 Bump github/codeql-action/upload-sarif
add fb3fc2cd33 Bump github/codeql-action/upload-sarif
add 67cf94a438 Bump actions/setup-java from 5.4.0 to 5.5.0
add c27e659868 Bump github/codeql-action/upload-sarif
add 9a6c5baa64 Bump github/codeql-action/init from 4.36.3 to 4.37.0
add e0d925e71d Bump github/codeql-action/autobuild from 4.36.3 to 4.37.0
add 7db9a4251d Bump github/codeql-action/analyze from 4.36.3 to 4.37.0
add 6a0fd3f874 Bump github/codeql-action/upload-sarif
add 5959f76a77 Bump github/codeql-action/upload-sarif
add 37a7ae87ce Bump github/codeql-action/upload-sarif
add 631966aabf Bump github/codeql-action/upload-sarif
add 2bb6294894 Bump github/codeql-action/upload-sarif
add 34889b8098 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add d478daf86c Bump actions/setup-java from 5.5.0 to 5.6.0
add 0b83f01a24 Bump actions/checkout from 7.0.0 to 7.0.1
add 55e60db972 Bump github/codeql-action/init from 4.37.0 to 4.37.1
add 27fd9882fe Bump github/codeql-action/autobuild from 4.37.0 to 4.37.1
add 36efc74334 Bump github/codeql-action/analyze from 4.37.0 to 4.37.1
add 142373cf5c Bump github/codeql-action/autobuild from 4.37.1 to 4.37.3
add cb74416d85 Bump github/codeql-action/init and
github/codeql-action/analyze from 4.37.1 to 4.37.3
add fc702a524f Fixed: EntityExpr no longer hardcodes the "default"
delegator when validating condition types (OFBIZ-5100)
add 459f7f0405 Fixed: E-commerce search and product detail no longer leak
products across catalogs (OFBIZ-4755) (#1500)
add df252d9391 Bump ossf/scorecard-action from 2.4.3 to 2.4.4
add ced97d48cc Bump docker/login-action from 4.4.0 to 4.5.1
add 51ecf97c35 Fixed: Add validation for product image file names in
renameImage to prevent path traversal
add 9cfc1fb93e Bump docker/login-action from 4.5.1 to 4.5.2
add c1b4bd4f4c Improved: hardens validation of screen location
add 02f4c8b0d5 Fixed: Gift card purchase copyMe (BCC purchaser) can never
work (OFBIZ-13464) (#1504)
add aa922a525a Fixed: OFBizTestCase-based integration tests never run on
release24.09 (OFBIZ-13469) (#1513)
add e613f2d7f0 Fixed: Gradle build failure in a linked git worktree
(OFBIZ-13470) (#1518)
add 50fda6a189 Fixed: Reject shipments mixing ship groups with different
destinations (OFBIZ-5346) (backport to release24.09) (#1509)
add 916fce3b4e Bump docker/login-action from 4.5.2 to 4.6.0
add 5fd4cbe9e7 Bump github/codeql-action/init from 4.37.3 to 4.37.4
add cf0dda4867 Bump github/codeql-action/autobuild from 4.37.3 to 4.37.4
add 38d1e70a13 Bump github/codeql-action/analyze from 4.37.3 to 4.37.4
add 2b4b619201 Fixed: PAssed setIfEmpty True on updating Invoice header
and Invoice … (#1536)
add 8fdd4a5e64 Fixed : Child communication event sorting. (OFBIZ-8152)
(#1538)
add b5ca713e01 Fixed: MissingMethodException thrown during the execution
of the updateProductStore service when attempting to expire existing
facilities. (OFBIZ-13472) (#1539)
add edf5dbc2ca Fixed: PDF upload accepted embedded attachments when
ZUGFeRD upload was disabled (OFBIZ-13485)
add c9c76ed82f Fixed: URLConnector.openUntrustedConnection(...) public
overloads silently performed trusted SSL connections (OFBIZ-13484) (#1570)
add 7bd8416fff Fixed: Remove HOSTCERT_MIN_CHECK from SSLUtil (OFBIZ-13482)
(backport to release24.09) (#1560)
add 59c8e09fd5 Fixed: Broken javamail-container sample in
ofbiz-component.xml (#1551)
add a7fb46af16 Fixed: sendFailureNotification NPEs on default sendFrom,
masking the original SMTP error (OFBIZ-13477) (#1549)
add 0324d41362 Fixed: MultiTrustManager doing flat cert-equality checks
instead of real X.509 chain validation (OFBIZ-13476)
add 7a989fefe0 Fixed: isExecutable() mime-type comparisons never matched
Tika's actual types (OFBIZ-13486)
add 2acee62d39 Fixed: isExecutable() missed Tika's ELF sub-types, letting
real Linux binaries through the check (OFBIZ-13486)
add 3de7b4c825 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add f4d91e1b3c Bump actions/setup-java from 5.6.0 to 5.7.0
add ce41a8a9bb Bump inputmask in
/themes/common-theme/webapp/common-theme/js
add 30ac3fc29d Fixed: Escape possibility to override serviceName at vcard
import (#1530)
add 3f5cbde0b6 Bump github/codeql-action/init from 4.37.4 to 4.37.6
add bb671944b6 Bump github/codeql-action/analyze from 4.37.4 to 4.37.6
add 16126aec8c Bump github/codeql-action/autobuild from 4.37.4 to 4.37.6
add e332d3d170 Fixed: HashMaps are not properly rendered in FTL with
current FTL integration (OFBIZ-13164) (#1616)
add 66c87ad731 Fixed: noWebshellInMetadata NPEs when readMetadata can't
parse the file
add cfe9a75c2d Fixed: distTar/distZip ships unused Node.js runtime caches,
bloating the distribution archive (OFBIZ-13491)
add 5b2870c7d4 Improved: Authorization enforcement for HumanRes category
tree data access (#1637) (#1640)
add e469a3956a Tighten how suffix-selected views resolve against their
owning request map (#1645)
add 79b8f25794 Improved: Enhance RequestHandler view state persistence and
screen location resolution (#1624) (#1653)
add 27e17366ab Fixed: ControlFilter's FreeMarker-interpolation guard was
unreachable due to fail-open security check (OFBIZ-13492) (#1642)
add a76610be8e Restrict widget resource locations to component:// or an
explicit allowlist (#1650) (#1654)
add ccdee9ee3f Fix webtools Run Suite/Run Case: missing prerequisites and
shared ambient transaction (#1655) (#1656)
add 16517b20de Improved: Validate tenant ID before creating a per-tenant
delegator (#1663)
add e51ba7984a Improved: Add validation and permission check to
replaceImageToExistImage service
add 80f4315d17 Improved: Add permission check and path validation to
imageCrop and imageRotate services
add 5abe1a3be7 Improved: Add missing permission and path checks across
ImageManagementServices methods
add 44fccc4975 Improved: Check path containment before invoking
SecuredUpload.isValidFileName in isValidProductImageFileName (#1685)
add 8b32481170 Bump github/codeql-action/init from 4.37.6 to 4.37.7
add 2ccf564ef7 Bump github/codeql-action/autobuild from 4.37.6 to 4.37.7
add 190df65d9b Bump github/codeql-action/analyze from 4.37.6 to 4.37.7
add ae65a30820 Fixed: TaxAuthority lookup allows selecting parties without
the TaxAuthority role (OFBIZ-12374) (#1697)
add 677ca83bf9 Fix content visibility check in help screens (#1703) (#1705)
add bbce2532a6 Improved input handling and access control around the
invoice email-aending flow (#1706)
add 3ae0be74d4 Improved webtools data file viewer URL handling (#1707)
(#1708)
add 503b3cb4e5 Improved externalLoginKey handling for cross-application
navigation (…#1710) (#1713)
add 37f19aadc9 Improved: escape link parameter values in
MacroScreenRenderer.renderLink (#1711) (#1715)
add fd56e48e35 Improved: add permission and path checks to
XmlDsDump.groovy (#1712) (#1714)
add 48853ea334 Introducing upper bound for rowCount in MultiForm-Requests
(#1691) (#1716)
add 764f989972 Improved: authorization checks on Catalog and Order Manager
helper routes (#1717) (#1728)
add 39cc356dd1 Improved: Align survey template location resolution with
other widget/template loaders (#1730) (#1732)
add 3008785904 Improved: Build an explicit DocumentBuilder for XML-typed
content rendering in ContentWorker (#1731) (#1733)
add 9bdcd614ea Improved: Anchor content role-creation permission checks to
the target content (#1734) (#1737)
add 4f988acd4b Improved: Reuse existing catalog permission checks for
search-result bulk actions (#1735) (#1738)
add f018379852 Improved: Anchor catalog quick-admin write events to their
permission tier (#1739) (#1740)
add 3c5d8803f1 Bump github/codeql-action/init from 4.37.7 to 4.37.8
add 0b435a40b7 Bump github/codeql-action/autobuild from 4.37.7 to 4.37.8
add c6125d312c Bump github/codeql-action/analyze from 4.37.7 to 4.37.8
add 2f9ffce1b8 Improved: bind EntityFunction literal values as SQL
parameters instead of inlining them (#1729) (#1742)
add 4bae54df46 Fixed: updateLayout authorizing under CONTENT_CREATE then
updating unrelated records unchecked (#1745) (#1746)
add 41afcbcc58 Fixed: unrestricted file destination in DataServices
createFile/updateFile (#1748)
add 9cd3bc6bb8 Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add 39d24b7443 Fixed: CMS use-when expressions still templated into string
literals (#1789)
add a3b1039944 Fixed: arbitrary service execution via Content.serviceName
in ContentWorker (#1791)
add 32148394df Bump actions/setup-java from 5.7.0 to 6.0.0
add 6a3a4b28b6 Bump org.apache.cxf:cxf-rt-frontend-jaxrs from 3.6.10 to
3.6.12
add 58a9ee3044 Bump org.clojure:clojure from 1.12.4 to 1.12.5
add 07d4630123 Bump org.apache.tomcat:tomcat-catalina-ha from 9.0.118 to
9.0.121
add e1471a612b Bump org.apache.pdfbox:pdfbox from 2.0.36 to 2.0.37
add 75b18eb672 Fixed: Bump ant-junit from 1.10.15 to 1.10.17 in
build.gradle
add 5222d76545 Bump commons-validator:commons-validator from 1.10.1 to
1.11.0
add cdd66486e8 Bump org.apache.commons:commons-collections4 from 4.5.0 to
4.6.0
add 84d55008c2 Bump com.drewnoakes:metadata-extractor from 2.20.0 to 2.21.0
add 248ccd80f1 Bump com.gradle.common-custom-user-data-gradle-plugin
add 83e7811449 Bump org.apache.logging.log4j:log4j-core from 2.25.4 to
2.26.1
add cf9dacdd45 Bump com.auth0:java-jwt from 4.5.2 to 4.6.0
add 63fa0ed993 Bump org.apache.sshd:sshd-core from 2.17.1 to 2.19.0
add 0663354da6 Bump com.fasterxml.jackson.core:jackson-databind from
2.21.3 to 2.22.2
add 16a55a547a Bump org.apache.shiro:shiro-crypto-cipher from 2.1.0 to
2.2.1
add adc29886fa Bump org.mustangproject:library from 2.8.0 to 2.26.0 (#1803)
add 44c9195dcc Bump jquery in /themes/common-theme/webapp/common-theme/js
add 4b42ad88d8 Bump jquery-migrate from 3.6.0 to 4.0.2 in
/themes/common-theme/webapp/common-theme/js
add 9a0f047ddd Replace removed jQuery.isArray/parseJSON with native
equivalents in the three live call sites (fieldlookup.js, OfbizUtil.js
autocomplete + inplace-edit)
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (57f2a82c61)
\
N -- N -- N
refs/heads/dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/jquery-4.0.0
(9a0f047ddd)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/dependabot.yml | 21 +-
.../workflows/asf-allowlist-check.yml | 39 +-
.github/workflows/codeql-analysis.yml | 15 +-
.github/workflows/dependency-review.yml | 9 +-
.../{docker-image.yaml => docker-image.yml} | 23 +-
.github/workflows/{gradle.yaml => gradle.yml} | 18 +-
.github/workflows/scorecard.yml | 16 +-
.gitignore | 1 +
Dockerfile | 2 +-
README.adoc | 2 +-
VERSION | 2 +-
.../minilang/ledger/GeneralLedgerServices.xml | 3 +
.../accounting/servicedef/services_invoice.xml | 1 +
.../invoice/InvoiceServicesScript.groovy | 8 +-
.../ofbiz/accounting/invoice/InvoiceServices.java | 4 +-
.../payment/GiftCertificateServices.java | 14 +-
.../thirdparty/eway/GatewayResponse.java | 4 +-
.../thirdparty/gosoftware/RitaServices.java | 2 +-
.../thirdparty/paypal/PayPalServices.java | 7 +-
.../thirdparty/valuelink/ValueLinkServices.java | 4 +-
.../accounting/AutoAcctgAdminTests.groovy | 0
.../accounting/AutoAcctgAgreementTests.groovy | 0
.../accounting/AutoAcctgBudgetTests.groovy | 0
.../accounting/AutoAcctgCostTests.groovy | 0
.../accounting/AutoAcctgFinAccountTests.groovy | 0
.../accounting/AutoAcctgFixedAssetTests.groovy | 0
.../accounting/AutoAcctgInvoiceTests.groovy | 0
.../accounting/AutoAcctgLedgerTests.groovy | 0
.../accounting/AutoAcctgPaymentGatewayTests.groovy | 0
.../accounting/AutoAcctgPaymentTests.groovy | 0
.../accounting/AutoAcctgTransPurchaseTests.groovy | 0
.../accounting/AutoAcctgTransSalesTests.groovy | 0
.../accounting/accounting/AutoInvoiceTests.groovy | 0
.../accounting/accounting/AutoPaymentTests.groovy | 0
.../accounting/accounting/FixedAssetTests.groovy | 0
.../accounting/InvoicePerShipmentTests.groovy | 0
.../accounting/PaymentApplicationTests.groovy | 0
.../ofbiz/accounting/accounting/RateTests.groovy | 0
.../webapp/accounting/WEB-INF/controller.xml | 10 +
applications/accounting/widget/AccountingMenus.xml | 6 +-
applications/accounting/widget/GlForms.xml | 2 +-
applications/accounting/widget/GlSetupScreens.xml | 1 +
.../accounting/widget/TaxAuthorityForms.xml | 4 +-
.../widget/accounting/AccountingInvoiceItemCpd.xml | 2 +-
.../commonext/widget/ofbizsetup/ProfileScreens.xml | 4 +-
applications/content/config/ContentUiLabels.xml | 3 +
.../content/minilang/layout/LayoutEvents.xml | 43 +-
.../permission/DataResourcePermissionServices.xml | 35 ++
applications/content/servicedef/services.xml | 63 +--
.../content/servicedef/services_content.xml | 8 +
.../content/ResolveRenderedDataResource.groovy | 40 ++
.../permission/ContentPermissionServices.groovy | 19 +-
.../ofbiz/content/ContentManagementServices.java | 63 +--
.../ofbiz/content/content/ContentServices.java | 101 ----
.../ofbiz/content/content/ContentWorker.java | 137 ++----
.../ofbiz/content/data/DataResourceWorker.java | 156 +++----
.../apache/ofbiz/content/data/DataServices.java | 31 ++
.../ofbiz/content/output/OutputServices.java | 9 +-
.../ofbiz/content/survey/PdfSurveyServices.java | 46 +-
.../apache/ofbiz/content/survey/SurveyWrapper.java | 5 +
.../content/webapp/ftl/RenderContentAsText.java | 2 +-
.../content/webapp/ftl/RenderSubContentAsText.java | 2 +-
.../webapp/ftl/RenderSubContentCacheTransform.java | 2 +-
.../ofbiz/content/content/ContentTests.groovy | 0
.../content/template/cms/CMSContentEdit.ftl | 16 +-
.../content/webapp/content/WEB-INF/controller.xml | 8 +-
applications/content/widget/cms/CMSForms.xml | 26 +-
.../datamodel/data/demo/ContentDemoData.xml | 7 +
.../datamodel/data/seed/ContentSeedData.xml | 6 +
.../datamodel/entitydef/shipment-entitymodel.xml | 2 +-
.../humanres/config/HumanResErrorUiLabels.xml | 3 +
.../org/apache/ofbiz/humanres/HumanResEvents.java | 11 +
.../webapp/humanres/WEB-INF/controller.xml | 2 +-
.../jobshopmgt/ProductionRunServices.java | 23 +
.../manufacturing/techdata/TechDataServices.java | 2 +-
applications/marketing/servicedef/services.xml | 26 +-
.../ofbiz/marketing/sfa/lead/LeadServices.groovy | 10 +
.../marketing/tracking/TrackingCodeEvents.java | 1 +
.../java/org/apache/ofbiz/sfa/vcard/VCard.java | 7 +-
.../marketing/marketing/test/MarketingTests.groovy | 0
.../webapp/marketing/WEB-INF/controller.xml | 6 +-
.../marketing/webapp/sfa/WEB-INF/controller.xml | 4 +-
.../marketing/widget/sfa/forms/ContactForms.xml | 1 -
.../marketing/widget/sfa/forms/LeadForms.xml | 3 +-
.../order/minilang/order/OrderServices.xml | 27 +-
.../ofbiz/order/entry/catalog/KeywordSearch.groovy | 4 +-
.../ofbiz/order/entry/catalog/Product.groovy | 24 +
.../ofbiz/order/quote/QuoteServicesScript.groovy | 15 +-
.../apache/ofbiz/order/order/OrderReadHelper.java | 1 +
.../apache/ofbiz/order/order/OrderServices.java | 3 +
.../ofbiz/order/shoppingcart/CheckOutEvents.java | 2 +-
.../ofbiz/order/shoppingcart/ShoppingCart.java | 8 -
.../order/shoppinglist/ShoppingListEvents.java | 3 +-
.../test/CustRequestPermissionCheckTests.groovy | 0
.../order/order/test/OrderRequirementTests.groovy | 0
.../ofbiz/order/order/test/OrderReturnTests.groovy | 0
.../ofbiz/order/order/test/OrderTests.groovy | 0
.../ofbiz/order/order/test/QuoteTests.groovy | 0
.../order/order/test/ShoppingListTests.groovy | 0
applications/order/template/order/FindOrders.ftl | 38 +-
applications/order/template/order/OrderInfo.ftl | 3 +-
applications/order/template/order/OrderItems.ftl | 8 +-
.../order/template/order/OrderShippingInfo.ftl | 118 ++---
.../order/webapp/ordermgr/WEB-INF/controller.xml | 4 +-
.../order/widget/ordermgr/CustRequestForms.xml | 2 +-
applications/order/widget/ordermgr/OrderForms.xml | 2 +-
.../party/party/PartyPermissionServices.groovy | 4 +-
.../ofbiz/party/contact/ContactMechServices.java | 2 +-
.../apache/ofbiz/party/party/PartyServices.java | 30 +-
.../party/party/test/ContactMechWorkerTests.groovy | 0
.../party/party/test/PartyContactMechTests.groovy | 0
.../party/party/test/PartyStatusChangeTests.groovy | 0
.../ofbiz/party/party/test/PartyTests.groovy | 0
.../template/party/DisplayCommunicationContent.ftl | 23 +-
.../widget/partymgr/CommunicationEventScreens.xml | 4 +-
applications/party/widget/partymgr/LookupForms.xml | 33 ++
.../party/widget/partymgr/LookupScreens.xml | 28 ++
.../product/config/ProductErrorUiLabels.xml | 6 +
applications/product/config/ProductUiLabels.xml | 29 ++
.../shipment/issuance/IssuanceServices.xml | 64 ++-
applications/product/servicedef/secas.xml | 1 +
applications/product/servicedef/secas_shipment.xml | 5 +-
applications/product/servicedef/services.xml | 8 +
.../product/servicedef/services_shipment.xml | 1 +
.../imagemanagement/ImageRecentlyApproved.groovy | 10 +-
.../facility/inventory/ReceiveInventory.groovy | 2 +
.../product/store/ProductStoreServices.groovy | 2 +-
.../product/product/test/ShipmentTests.groovy | 204 --------
.../shipment/ShipmentReceiptServices.groovy | 52 ++-
.../ofbiz/product/shipment/ShipmentServices.groovy | 15 +-
.../ofbiz/product/category/CategoryServices.java | 11 +
.../ofbiz/product/imagemanagement/CropImage.java | 33 +-
.../imagemanagement/ImageManagementServices.java | 158 ++++++-
.../product/imagemanagement/ReplaceImage.java | 26 ++
.../ofbiz/product/imagemanagement/RotateImage.java | 35 +-
.../ofbiz/product/product/ProductEvents.java | 44 ++
.../ofbiz/product/product/ProductSearchEvents.java | 65 +++
.../ofbiz/product/product/ProductServices.java | 4 +-
.../ofbiz/product/store/ProductStoreEvents.java | 13 +
.../ofbiz/shipment/packing/PackingSession.java | 54 +++
.../ofbiz/shipment/shipment/ShipmentServices.java | 2 +
.../thirdparty/usps/UspsMockApiServlet.java | 126 -----
.../product/product/test/CategoryTests.groovy | 0
.../ofbiz/product/product/test/CostTests.groovy | 0
.../product/product/test/InventoryTests.groovy | 0
.../product/product/test/ProductConfigTests.groovy | 0
.../product/test/ProductFeatureTypeTests.groovy | 0
.../product/product/test/ProductPriceTests.groovy | 0
.../product/test/ProductPromoActionTests.groovy | 4 +-
.../product/test/ProductPromoCondTests.groovy | 0
.../product/product/test/ProductTagTest.groovy | 0
.../ofbiz/product/product/test/ProductTest.groovy | 0
.../ofbiz/product/product/test/ProductTests.groovy | 0
.../product/product/test/ShipmentTests.groovy | 516 +++++++++++++++++++++
.../shipment/product/test/ShipmentCostTests.groovy | 0
.../template/inventory/ReceiveInventory.ftl | 42 +-
.../template/promo/EditProductPromoRules.ftl | 1 +
.../ReceiveInventoryAgainstPurchaseOrder.ftl | 7 +-
.../product/webapp/catalog/WEB-INF/controller.xml | 4 +-
.../product/webapp/facility/WEB-INF/controller.xml | 2 +-
.../product/webapp/facility/WEB-INF/web.xml | 13 +-
.../product/widget/catalog/ProductForms.xml | 1 -
.../product/widget/facility/ShipmentForms.xml | 2 +-
.../product/widget/facility/ShipmentScreens.xml | 4 +-
.../ofbiz/workeffort/workeffort/ICalConverter.java | 12 +-
.../workeffort/workeffort/WorkEffortServices.java | 6 +-
build.gradle | 159 ++++---
config/codenarc/codenarc.groovy | 2 +-
dependencies.gradle | 108 ++---
docker/examples/postgres-demo/docker-compose.yml | 2 -
.../base/config/SafeObjectInputStream.properties | 4 +-
.../org/apache/ofbiz/base/container/Container.java | 4 +-
.../ofbiz/base/conversion/BooleanConverters.java | 2 +-
.../org/apache/ofbiz/base/crypto/HashCrypt.java | 9 +-
.../base/log4j/OFBizDynamicThresholdFilter.java | 5 +-
.../org/apache/ofbiz/base/util/GroovyUtil.java | 26 +-
.../apache/ofbiz/base/util/MultiTrustManager.java | 69 ++-
.../org/apache/ofbiz/base/util/Observable.java | 2 +-
.../java/org/apache/ofbiz/base/util/SSLUtil.java | 40 --
.../ofbiz/base/util/SafeObjectInputStream.java | 36 +-
.../org/apache/ofbiz/base/util/ScriptHelper.java | 2 +-
.../java/org/apache/ofbiz/base/util/Scriptlet.java | 2 +-
.../org/apache/ofbiz/base/util/URLConnector.java | 6 +-
.../java/org/apache/ofbiz/base/util/UtilCodec.java | 3 +-
.../java/org/apache/ofbiz/base/util/UtilHtml.java | 2 +
.../java/org/apache/ofbiz/base/util/UtilHttp.java | 35 +-
.../java/org/apache/ofbiz/base/util/UtilMisc.java | 15 +
.../java/org/apache/ofbiz/base/util/UtilURL.java | 148 ++++++
.../org/apache/ofbiz/base/util/UtilValidate.java | 21 +
.../java/org/apache/ofbiz/base/util/UtilXml.java | 45 +-
.../ofbiz/base/util/string/UelFunctions.java | 19 +-
.../ofbiz/base/util/template/FreeMarkerWorker.java | 10 +-
.../base/util/template/OfbizBeansWrapper.java | 79 ++++
.../ofbiz/base/util/template/XslTransform.java | 12 +-
.../org/apache/ofbiz/base/test/SimpleTests.groovy | 0
.../apache/ofbiz/base/util/UtilObjectTests.java | 5 +
framework/common/config/general.properties | 3 +
framework/common/data/CommonTypeData.xml | 3 +
framework/common/data/UnitData.xml | 8 +-
.../java/org/apache/ofbiz/common/CommonEvents.java | 8 +-
.../ofbiz/common/authentication/AuthHelper.java | 19 +-
.../apache/ofbiz/common/email/EmailServices.java | 25 +-
.../ofbiz/common/email/NotificationServices.java | 10 +-
.../common/login/LdapAuthenticationServices.java | 3 +-
.../common/webcommon/WEB-INF/portal-controller.xml | 2 +-
.../java/org/apache/ofbiz/datafile/Record.java | 19 +-
.../org/apache/ofbiz/datafile/RecordIterator.java | 12 +-
.../org/apache/ofbiz/entity/DelegatorFactory.java | 5 +-
.../org/apache/ofbiz/entity/GenericEntity.java | 2 +-
.../ofbiz/entity/condition/EntityCondition.java | 66 ++-
.../entity/condition/EntityConditionBuilder.java | 8 +-
.../entity/condition/EntityConditionListBase.java | 8 +-
.../entity/condition/EntityConditionVisitor.java | 12 -
.../condition/EntityDateFilterCondition.java | 39 +-
.../apache/ofbiz/entity/condition/EntityExpr.java | 15 +-
.../ofbiz/entity/condition/EntityFunction.java | 2 +-
.../ofbiz/entity/condition/EntityJoinOperator.java | 16 +-
.../ofbiz/entity/condition/EntityNotCondition.java | 8 +-
.../ofbiz/entity/condition/EntityOperator.java | 2 -
.../apache/ofbiz/entity/datasource/GenericDAO.java | 33 +-
.../ofbiz/entity/datasource/GenericHelperInfo.java | 2 +-
.../apache/ofbiz/entity/jdbc/JdbcValueHandler.java | 3 +-
.../apache/ofbiz/entity/model/ModelViewEntity.java | 2 +-
.../ofbiz/entity/serialize/XmlSerializer.java | 2 +-
.../apache/ofbiz/entity/util/EntityDataLoader.java | 2 +-
.../apache/ofbiz/entity/util/EntitySaxReader.java | 9 +-
.../org/apache/ofbiz/entity/util/EntityUtil.java | 7 +-
.../ofbiz/entity/EntityConditionVisitorTests.java | 7 -
.../org/apache/ofbiz/minilang/MiniLangUtil.java | 8 +
.../org/apache/ofbiz/minilang/SimpleMethod.java | 2 +-
.../method/conditional/ConditionalFactory.java | 2 +-
.../config/freemarker-whitelist.properties | 2 +-
framework/security/config/security.properties | 26 +-
.../org/apache/ofbiz/security/SecuredUpload.java | 234 +++++++++-
.../org/apache/ofbiz/security/SecurityUtil.java | 77 +++
.../apache/ofbiz/security/SecurityUtilTest.java | 82 ++++
.../src/test/resources/security.properties | 53 +++
framework/service/config/serviceengine.xml | 1 -
framework/service/ofbiz-component.xml | 14 +-
.../org/apache/ofbiz/service/ModelService.java | 2 +
.../ofbiz/service/config/ServiceConfigUtil.java | 2 +-
.../apache/ofbiz/service/engine/HttpEngine.java | 210 ---------
.../ofbiz/service/engine/SOAPClientEngine.java | 5 +-
.../ofbiz/service/jms/AbstractJmsListener.java | 19 +-
.../org/apache/ofbiz/service/job/JobManager.java | 12 +
.../ofbiz/service/test/ServicePurgeTest.groovy | 0
.../java/org/apache/ofbiz/base/start/Start.java | 6 +-
.../apache/ofbiz/base/start/StartupCommand.java | 2 +-
.../ofbiz/base/start/StartupCommandUtil.java | 56 +--
.../ofbiz/testtools/EntityXmlAssertTest.java | 2 +-
.../ofbiz/testtools/GroovyScriptTestCase.java | 2 +-
.../org/apache/ofbiz/testtools/ModelTestSuite.java | 109 ++++-
.../java/org/apache/ofbiz/webapp/WebAppUtil.java | 37 ++
.../apache/ofbiz/webapp/control/ContextFilter.java | 3 +
.../apache/ofbiz/webapp/control/ControlFilter.java | 3 +-
.../webapp/control/ExternalLoginKeysManager.java | 147 ++++--
.../apache/ofbiz/webapp/control/LoginWorker.java | 26 +-
.../ofbiz/webapp/control/RequestHandler.java | 92 +++-
.../org/apache/ofbiz/webapp/event/CoreEvents.java | 26 +-
.../ofbiz/webapp/event/JavaEventHandler.java | 18 +-
.../ofbiz/webapp/event/SOAPEventHandler.java | 10 +-
.../webapp/event/ServiceMultiEventHandler.java | 9 +-
.../ofbiz/webapp/ftl/FreeMarkerViewHandler.java | 22 +-
.../apache/ofbiz/webapp/view/ApacheFopWorker.java | 8 +
.../ofbiz/webapp/control/ControlFilterTests.java | 3 +
.../ofbiz/webapp/control/RequestHandlerTests.java | 31 ++
.../ofbiz/webtools/datafile/ViewDataFile.groovy | 120 ++---
.../webtools/entity/EntitySQLProcessor.groovy | 104 +++--
.../ofbiz/webtools/entity/ProgramExport.groovy | 407 ++++++++--------
.../apache/ofbiz/webtools/entity/XmlDsDump.groovy | 33 +-
.../apache/ofbiz/webtools/WebToolsServices.java | 16 +-
.../ofbiz/webtools/artifactinfo/RunTestEvents.java | 2 +-
.../webapp/webtools/WEB-INF/controller.xml | 26 +-
framework/webtools/widget/CommonScreens.xml | 9 +-
.../java/org/apache/ofbiz/widget/WidgetWorker.java | 25 +-
.../org/apache/ofbiz/widget/model/FormFactory.java | 19 +-
.../org/apache/ofbiz/widget/model/GridFactory.java | 19 +-
.../org/apache/ofbiz/widget/model/HtmlWidget.java | 3 +-
.../org/apache/ofbiz/widget/model/MenuFactory.java | 17 +-
.../apache/ofbiz/widget/model/ModelFormField.java | 4 +-
.../apache/ofbiz/widget/model/ScreenFactory.java | 7 +-
.../org/apache/ofbiz/widget/model/TreeFactory.java | 9 +-
.../ofbiz/widget/model/WidgetSecureLocation.java | 90 ++++
.../widget/renderer/html/HtmlTreeRenderer.java | 5 +-
.../widget/renderer/macro/MacroFormRenderer.java | 7 +-
.../widget/renderer/macro/MacroScreenRenderer.java | 10 +-
gradle/init-gradle-wrapper.ps1 | 104 ++++-
gradle/init-gradle-wrapper.sh | 203 +++++---
gradle/wrapper/gradle-wrapper.jar | Bin 61574 -> 0 bytes
gradle/wrapper/gradle-wrapper.properties | 4 +-
gradlew | 286 +++++++-----
gradlew.bat | 58 +--
init-gradle-wrapper.bat | 7 +-
settings.gradle | 4 +-
themes/common-theme/template/ChangePassword.ftl | 1 -
.../webapp/common-theme/js/package-lock.json | 29 +-
.../webapp/common-theme/js/package.json | 6 +-
.../webapp/common-theme/js/util/OfbizUtil.js | 143 +++---
.../webapp/common-theme/js/util/fieldlookup.js | 2 +-
themes/common-theme/widget/HelpScreens.xml | 27 +-
themes/helveticus/template/ChangePassword.ftl | 1 -
.../webapp/helveticus/helveticus-main-theme.less | 1 +
themes/rainbowstone/template/ChangePassword.ftl | 1 -
303 files changed, 4971 insertions(+), 2558 deletions(-)
copy framework/common/config/qrcode.properties =>
.github/workflows/asf-allowlist-check.yml (51%)
rename .github/workflows/{docker-image.yaml => docker-image.yml} (87%)
rename .github/workflows/{gradle.yaml => gradle.yml} (81%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgAdminTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgAgreementTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgBudgetTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgCostTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgFinAccountTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgFixedAssetTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgInvoiceTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgLedgerTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgPaymentGatewayTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgPaymentTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgTransPurchaseTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoAcctgTransSalesTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoInvoiceTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/AutoPaymentTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/FixedAssetTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/InvoicePerShipmentTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/PaymentApplicationTests.groovy
(100%)
rename applications/accounting/src/{main =>
test}/groovy/org/apache/ofbiz/accounting/accounting/RateTests.groovy (100%)
create mode 100644
applications/content/src/main/groovy/org/apache/ofbiz/content/content/ResolveRenderedDataResource.groovy
rename applications/content/src/{main =>
test}/groovy/org/apache/ofbiz/content/content/ContentTests.groovy (100%)
rename applications/marketing/src/{main =>
test}/groovy/org/apache/ofbiz/marketing/marketing/test/MarketingTests.groovy
(100%)
rename applications/order/src/{main =>
test}/groovy/org/apache/ofbiz/order/order/test/CustRequestPermissionCheckTests.groovy
(100%)
rename applications/order/src/{main =>
test}/groovy/org/apache/ofbiz/order/order/test/OrderRequirementTests.groovy
(100%)
rename applications/order/src/{main =>
test}/groovy/org/apache/ofbiz/order/order/test/OrderReturnTests.groovy (100%)
rename applications/order/src/{main =>
test}/groovy/org/apache/ofbiz/order/order/test/OrderTests.groovy (100%)
rename applications/order/src/{main =>
test}/groovy/org/apache/ofbiz/order/order/test/QuoteTests.groovy (100%)
rename applications/order/src/{main =>
test}/groovy/org/apache/ofbiz/order/order/test/ShoppingListTests.groovy (100%)
rename applications/party/src/{main =>
test}/groovy/org/apache/ofbiz/party/party/test/ContactMechWorkerTests.groovy
(100%)
rename applications/party/src/{main =>
test}/groovy/org/apache/ofbiz/party/party/test/PartyContactMechTests.groovy
(100%)
rename applications/party/src/{main =>
test}/groovy/org/apache/ofbiz/party/party/test/PartyStatusChangeTests.groovy
(100%)
rename applications/party/src/{main =>
test}/groovy/org/apache/ofbiz/party/party/test/PartyTests.groovy (100%)
delete mode 100644
applications/product/src/main/groovy/org/apache/ofbiz/product/product/test/ShipmentTests.groovy
delete mode 100644
applications/product/src/main/java/org/apache/ofbiz/shipment/thirdparty/usps/UspsMockApiServlet.java
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/CategoryTests.groovy (100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/CostTests.groovy (100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/InventoryTests.groovy (100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductConfigTests.groovy
(100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductFeatureTypeTests.groovy
(100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductPriceTests.groovy
(100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductPromoActionTests.groovy
(99%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductPromoCondTests.groovy
(100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductTagTest.groovy (100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductTest.groovy (100%)
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/product/product/test/ProductTests.groovy (100%)
create mode 100644
applications/product/src/test/groovy/org/apache/ofbiz/product/product/test/ShipmentTests.groovy
rename applications/product/src/{main =>
test}/groovy/org/apache/ofbiz/shipment/product/test/ShipmentCostTests.groovy
(100%)
create mode 100644
framework/base/src/main/java/org/apache/ofbiz/base/util/template/OfbizBeansWrapper.java
rename framework/base/src/{main =>
test}/groovy/org/apache/ofbiz/base/test/SimpleTests.groovy (100%)
create mode 100644 framework/security/src/test/resources/security.properties
delete mode 100644
framework/service/src/main/java/org/apache/ofbiz/service/engine/HttpEngine.java
rename framework/service/src/{main =>
test}/groovy/org/apache/ofbiz/service/test/ServicePurgeTest.groovy (100%)
create mode 100644
framework/widget/src/main/java/org/apache/ofbiz/widget/model/WidgetSecureLocation.java
delete mode 100644 gradle/wrapper/gradle-wrapper.jar
