Fixed: IDOR vulnerability in the order processing feature in ecommerce component
Fixes a bug when there are no problem viewing the order, my bad
@@ -59,10 +59,10 @@ if (orderHeader) {
canViewInternalDetails = false
errMsgList.add("It's not an error : you are not allowed to view this!")
showErrorMsg = "Y"
- }
request.setAttribute("_ERROR_MESSAGE_LIST_", errMsgList)
context.showErrorMsg = showErrorMsg
}
+ }
context.hasPermission = hasPermission
context.canViewInternalDetails = canViewInternalDetails
