[
https://issues.apache.org/jira/browse/OFBIZ-13364?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18059719#comment-18059719
]
Carsten Heinrigs commented on OFBIZ-13364:
------------------------------------------
Hi Jacques,
1) /catalog/control/EditFeatureCategories
Search Results
there is a table with buttons in the 'ID' column (default 'TEXT', 'IMAGE')
clicking any of buttons returned Error 500
----
*Type* Exception Report
*Message* For security reason this URL is not accepted
URL: /catalog/control//EditFeatureCategoryFeatures?productFeatureCategoryId=TEXT
----
2) /content/control/EditDataResource?dataResourceId=api.schema.DHL
Edit Data Resource
there is a table with buttons in the 'Content ID' column.
clicking any of the buttons returned Error 500
----
*Type* Exception Report
*Message* For security reason this URL is not accepted
URL: /content/control//EditContent?contentId=api.schema.DHL
Don't know what other information you might need.
Greetings, Carsten
> Some widget form targets violate security checks
> ------------------------------------------------
>
> Key: OFBIZ-13364
> URL: https://issues.apache.org/jira/browse/OFBIZ-13364
> Project: OFBiz
> Issue Type: Bug
> Components: content, product/catalog
> Affects Versions: 24.09.05
> Reporter: Carsten Heinrigs
> Assignee: Jacques Le Roux
> Priority: Minor
>
> {color:#2e3436}ran into errors violating link security checks:{color}
> {color:#2e3436}1){color}
> {color:#2e3436}
> applications/content/widget/content/DataResourceForms.xml{color}
> {color:#2e3436}form name="ListContentsAssociatedToDataResource"{color}
> {color:#2e3436}hyperlink description="${contentId}"
> target="/EditContent"{color}
> {color:#2e3436}should be{color}
> {color:#2e3436}hyperlink description="${contentId}"
> target="EditContent"{color}
>
> 2)
> {color:#2e3436} applications/product/widget/catalog/FeatureForms.xml{color}
> {color:#2e3436}hyperlink
> {color}{color:#2e3436}description="${uiLabelMap.ProductGoToFeatureCategory}{color}
> {color:#2e3436}${productFeature.productFeatureCategoryId}"{color}
> {color:#2e3436}target="/EditFeatureCategoryFeatures"{color}
> {color:#2e3436}should be{color}
> {color:#2e3436}target="EditFeatureCategoryFeatures"{color}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
