Commit bf1fc284 authored by Antoine Catton's avatar Antoine Catton

Avoid accessing to predecessorvaluelist in order to avoid security

issues
parent 77d39d14
...@@ -466,7 +466,7 @@ class SlapTool(BaseTool): ...@@ -466,7 +466,7 @@ class SlapTool(BaseTool):
# XXX-Antoine: support renaming # XXX-Antoine: support renaming
software_instance = movement.getAggregateValue(portal_type="Software Instance") software_instance = movement.getAggregateValue(portal_type="Software Instance")
hosting_subscription = movement.getAggregateValue(portal_type="Hosting Subscription") hosting_subscription = movement.getAggregateValue(portal_type="Hosting Subscription")
if software_instance in hosting_subscription.getPredecessorValueList() and \ if software_instance.getRelativeUrl() in hosting_subscription.getPredecessorList() and \
software_instance.getTitle() != hosting_subscription.getTitle(): software_instance.getTitle() != hosting_subscription.getTitle():
renamed = True renamed = True
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment