[jira] [Created] (OFBIZ-6295) Shoppingcart checkout shipping rules can be hacked

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Created] (OFBIZ-6295) Shoppingcart checkout shipping rules can be hacked

Nicolas Malin (Jira)
Christian Carlow created OFBIZ-6295:
---------------------------------------

             Summary: Shoppingcart checkout shipping rules can be hacked
                 Key: OFBIZ-6295
                 URL: https://issues.apache.org/jira/browse/OFBIZ-6295
             Project: OFBiz
          Issue Type: Bug
          Components: order
    Affects Versions: Trunk
            Reporter: Christian Carlow


Logic should be added to prevent someone from changing the default values of the shopping cart checkout carrier shipping method radio option value to a shipping method that isn't shown due to rules being broken.  I changed the radio option value using firebug but the order creation succeeded without any error about the shipping method rules being broken.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)