Re: svn commit: r773772 - /ofbiz/trunk/applications/order/servicedef/services_request.xml

[Scott Gray]

Hi Hans




Thanks
Scott

On 12/05/2009, at 3:20 PM, hans...@apache.org wrote:

Sorry if this is a stupid question, I haven't really looked in to the new html security stuff yet, but why would requestName contain html?

Author: hansbak
Date: Tue May 12 03:20:28 2009
New Revision: 773772

URL: http://svn.apache.org/viewvc?rev=773772&view=rev
Log:
allow safe html in customer request name and item content

Modified:
   ofbiz/trunk/applications/order/servicedef/services_request.xml


URL: 
http://svn.apache.org/viewvc/ofbiz/trunk/applications/order/servicedef/services_request.xml?rev=773772&r1=773771&r2=773772&view=diff

@@ -42,6 +42,7 @@
        <auto-attributes include="nonpk" mode="IN" optional="true"/>

+        <override name="custRequestName" allow-html="safe"/>
    </service>

@@ -73,12 +74,14 @@
        <auto-attributes include="pk" mode="INOUT" optional="false"/>
        <auto-attributes include="nonpk" mode="IN" optional="true"/>
        <override name="custRequestItemSeqId" optional="true"/>
+        <override name="story" allow-html="safe"/>
    </service>

        <description>Update a CustRequestItem record</description>
        <auto-attributes include="pk" mode="IN" optional="false"/>
        <auto-attributes include="nonpk" mode="IN" optional="true"/>
+        <override name="story" allow-html="safe"/>
    </service>

@@ -168,6 +171,7 @@

        <override name="content" allow-html="safe"/>
+        <override name="custRequestName" allow-html="safe"/>
    </service>

    <!-- custRequest content services -->

Modified: ofbiz/trunk/applications/order/servicedef/ services_request.xml = = = = = = = = ====================================================================== --- ofbiz/trunk/applications/order/servicedef/services_request.xml (original) +++ ofbiz/trunk/applications/order/servicedef/services_request.xml Tue May 12 03:20:28 2009 <attribute name="fromPartyId" type="String" mode="IN" optional="false"/> <auto-attributes include="all" mode="IN" entity- name="CustRequestItem" optional="true"/> <service name="updateCustRequest" engine="simple" default-entity- name="CustRequest" location="component://order/script/org/ofbiz/order/ request/CustRequestServices.xml" invoke="updateCustRequest" auth="true"> <service name="updateCustRequestItem" engine="simple" default- entity-name="CustRequestItem" location="component://order/script/org/ofbiz/order/ request/CustRequestServices.xml" invoke="updateCustRequestItem" auth="true"> <service name="copyCustRequestItem" default-entity- name="CustRequestItem" engine="simple" location="component://order/script/org/ofbiz/order/ request/CustRequestServices.xml" invoke="copyCustRequestItem" auth="true"> <attribute name="custRequestName" mode="IN" type="String" optional="true"/> <attribute name="custRequestId" mode="OUT" type="String" optional="false"/>

smime.p7s
Description: S/MIME cryptographic signature