From b8ac76b8df784825260e0492d94dcf7a4f561e2a Mon Sep 17 00:00:00 2001 From: Wenjie Zheng <wenjie.zheng@tiolive.com> Date: Tue, 9 Jun 2015 11:44:25 +0000 Subject: [PATCH] WorkflowTool.py: getChainsByType method return a regenerated dict to avoid scurity issue. --- product/ERP5/Tool/WorkflowTool.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/product/ERP5/Tool/WorkflowTool.py b/product/ERP5/Tool/WorkflowTool.py index c71eb34f96..966207da60 100644 --- a/product/ERP5/Tool/WorkflowTool.py +++ b/product/ERP5/Tool/WorkflowTool.py @@ -599,7 +599,10 @@ class WorkflowTool(BaseTool, OriginalWorkflowTool): 'Base_getWorklistIgnoredSecurityColumnSet', lambda: ())() def getChainsByType(self): - return self._chains_by_type + type_workflow_dict = {} + for type_id, workflow_id_list in self._chains_by_type.iteritems(): + type_workflow_dict.setdefault(type_id, []).append(workflow_id_list) + return type_workflow_dict def delTypeCBT(self, pt, wf_id): self._chains_by_type[pt] = tuple(wf for wf in self._chains_by_type[pt] if wf != wf_id) -- 2.30.9