[ 
https://issues.apache.org/jira/browse/OFBIZ-13317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18040864#comment-18040864
 ] 

Jacques Le Roux commented on OFBIZ-13317:
-----------------------------------------

Here is the case


{noformat}
2025-11-26 16:59:09,728 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceNotApplied(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}d8451d7509ae73421974f47752b6e9eef7503041
2025-11-26 16:59:09,729 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceTotal(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}edf12cf95597d52eacc14020a85a8df2abb34ab7
2025-11-26 16:59:09,742 |jsse-nio-8443-exec-1 |ServiceDispatcher             
|T| Sync service [accounting/getPartyNameForDate] finished in [2] milliseconds
2025-11-26 16:59:09,743 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceNotApplied(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}d8451d7509ae73421974f47752b6e9eef7503041
2025-11-26 16:59:09,743 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceTotal(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}edf12cf95597d52eacc14020a85a8df2abb34ab7
2025-11-26 16:59:09,755 |jsse-nio-8443-exec-1 |ServiceDispatcher             
|T| Sync service [accounting/getPartyNameForDate] finished in [3] milliseconds
2025-11-26 16:59:09,756 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceNotApplied(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}d8451d7509ae73421974f47752b6e9eef7503041
2025-11-26 16:59:09,756 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceTotal(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}edf12cf95597d52eacc14020a85a8df2abb34ab7
2025-11-26 16:59:09,775 |jsse-nio-8443-exec-1 |ServiceDispatcher             
|T| Sync service [accounting/getPartyNameForDate] finished in [6] milliseconds
2025-11-26 16:59:09,777 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceNotApplied(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}d8451d7509ae73421974f47752b6e9eef7503041
2025-11-26 16:59:09,778 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceTotal(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}edf12cf95597d52eacc14020a85a8df2abb34ab7
2025-11-26 16:59:09,792 |jsse-nio-8443-exec-1 |ServiceDispatcher             
|T| Sync service [accounting/getPartyNameForDate] finished in [4] milliseconds
2025-11-26 16:59:09,793 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceNotApplied(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}d8451d7509ae73421974f47752b6e9eef7503041
2025-11-26 16:59:09,794 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceTotal(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}edf12cf95597d52eacc14020a85a8df2abb34ab7
2025-11-26 16:59:09,811 |jsse-nio-8443-exec-1 |ServiceDispatcher             
|T| Sync service [accounting/getPartyNameForDate] finished in [4] milliseconds
2025-11-26 16:59:09,812 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceNotApplied(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}d8451d7509ae73421974f47752b6e9eef7503041
2025-11-26 16:59:09,812 |jsse-nio-8443-exec-1 |ScriptUtil                    
|W| Tried to execute unauthorized script
 ****
                 import java.text.NumberFormat;                 
return(NumberFormat.getNumberInstance(context.get("locale")).format(org.apache.ofbiz.accounting.invoice.InvoiceWorker.getInvoiceTotal(delegator,invoiceId)));
 ****
if it's safe script you can add the following hash to 
security.allowedScriptletHashes: {SHA}edf12cf95597d52eacc14020a85a8df2abb34ab7
{noformat}


> Tried to execute unauthorized script
> ------------------------------------
>
>                 Key: OFBIZ-13317
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-13317
>             Project: OFBiz
>          Issue Type: Bug
>          Components: accounting
>    Affects Versions: 24.09.05
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 24.09.05
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to