[OFBIZ-12324] Create a deny list to reject webshell tokens

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Implemented
• Affects Version/s: Trunk
• Fix Version/s: Release Branch 17.12, 18.12.01
• Component/s: framework/security
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 20/Sep/21 16:12
• Updated: 18/Feb/22 12:52
• Resolved: 20/Sep/21 16:17

Description

In OFBIZ-12305 I said

Somehow related: I'll also soon extract the list of words used in SecuredUpload::isValidText in a deniedWebShellWords property in security.properties

This is it