Fixed: Fix OFBiz speficic Javascript securiy issues reported by GH CodeQL
Actually I put in a path error then, it's not
value="/common/js/node_modules/node_modules/dompurify/dist/purify.min.js"
but
value="/common/js/node_modules/dompurify/dist/purify.min.js"
This fixes it
@@ -351,7 +351,7 @@ under the License.
<set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/jquery.browser/dist/jquery.browser.min.js" global="true"/>
<set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/jquery-migrate/dist/jquery-migrate.min.js" global="true"/>
<set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/jquery/dist/jquery.min.js" global="true"/>
- <set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/node_modules/dompurify/dist/purify.min.js" global="true"/>
+ <set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/dompurify/dist/purify.min.js" global="true"/>
<set field="layoutSettings.javaScripts[]" value="/common/js/util/OfbizUtil.js" global="true"/>
</actions>
<widgets>
@@ -457,7 +457,7 @@ under the License.
<set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/jquery.browser/dist/jquery.browser.min.js" global="true"/>
<set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/jquery-migrate/dist/jquery-migrate.min.js" global="true" />
<set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/jquery/dist/jquery.min.js" global="true"/>
- <set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/node_modules/dompurify/dist/purify.min.js" global="true"/>
+ <set field="layoutSettings.javaScripts[+0]" value="/common/js/node_modules/dompurify/dist/purify.min.js" global="true"/>
<!-- jQuery CSSs -->
<set field="layoutSettings.styleSheets[+0]" value="/common/js/node_modules/jquery-ui-dist/jquery-ui.min.css" global="true"/>
