Hi team, i´m needing a help please,

Currently i would like use bean shell to validate that a calculation number don´t be minor than 1, with this code I can not make it work:

import java.util.Arrays;
import org.joget.apps.app.service.AppUtil;
import org.joget.apps.form.model.Element;
import org.joget.apps.form.model.Form;
import org.joget.apps.form.model.FormData;
import org.joget.apps.form.service.FormUtil;
import org.joget.commons.util.LogUtil;

public boolean validate(Element element, FormData formData, String[] values) {
boolean result = true ;

try {
if(Integer.parseInt(values[0]) == 0){
formData.addFormError(subtotal, "Must be more than 1."); //change field id to your calculation field
return false;
}else{
return true;
formData.addFormError(subtotal, "Es mayor que 1."); //change field id to your calculation field
}

//do something

} catch (Exception e) {
LogUtil.error("CRM app - Backend userview", e, "Error retrieving user department in Report category permission");
}
return result;
}
//call validate method with injected variable
return validate(element, formData, values);

Attached is the LOG message .
joget _12-02.log

Someone can help with this?

thanks

I have the same problem as here #12 and I believe it's a bug.

On my mac, /Library/Java/JavaVirtualMachines/jdk1.8.0_131.jdk/Contents/Home/jre/bin/jarsigner doesn't exist.

The correct path is:
/Library/Java/JavaVirtualMachines/jdk1.8.0_131.jdk/Contents/Home/bin/jarsigner

Temporary workaround that helped me:

sudo ln -s /Library/Java/JavaVirtualMachines/jdk1.8.0_131.jdk/Contents/Home/bin/jarsigner /Library/Java/JavaVirtualMachines/jdk1.8.0_131.jdk/Contents/Home/jre/bin/jarsigner

When activity time out to a tool, joget bypass the tool and goes to next activity and audit trail shows cannot execute tool

[ERROR] Failed to execute goal on project wflow-jdbc: Could not resolve dependencies for project org.joget:wflow-jdbc:jar:5.0-RC9: The following artifacts could not be resolved: com.oracle:ojdbc6:jar:12.1.0.2, com.microsoft:sqljdbc:jar:4.0: Could not find artifact com.oracle:ojdbc6:jar:12.1.0.2 in central (https://repo.maven.apache.org/maven2) -> [Help 1]

When do you upgrade to spring boot?

mac ,https://dev.joget.org/community/display/KBv5/Joget+Workflow+Source+Code

but
[INFO] wflow-jdbc ......................................... SUCCESS [ 1.063 s] [INFO] wflow-commons ...................................... SUCCESS [ 1.881 s] [INFO] wflow-plugin-base .................................. SUCCESS [ 3.089 s] [INFO] wflow-plugin-archetype ............................. SUCCESS [ 0.478 s] [INFO] wflow-directory .................................... SUCCESS [ 6.144 s] [INFO] wflow-wfengine ..................................... SUCCESS [ 8.081 s] [INFO] wflow-core ......................................... SUCCESS [ 15.636 s] [INFO] wflow-consoleweb ................................... SUCCESS [ 16.758 s] [INFO] wflow-designer ..................................... SUCCESS [ 5.621 s] [INFO] wflow-designerweb .................................. FAILURE [ 0.680 s] [INFO] wflow-app .......................................... SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 59.679 s [INFO] Finished at: 2017-12-25T18:55:04-08:00 [INFO] Final Memory: 163M/885M [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.codehaus.mojo.webstart:webstart-maven-plugin:1.0-alpha-2:jnlp-download-servlet (default) on project wflow-designerweb: Result of /bin/sh -c "cd /Users/xr/work/test/jw-community-5.0-SNAPSHOT/wflow-designerweb/target/jnlp && /Library/Java/JavaVirtualMachines/jdk1.8.0_131.jdk/Contents/Home/jre/bin/jarsigner -keystore /Users/xr/work/test/jw-community-5.0-SNAPSHOT/wflow-designerweb/src/main/jnlp/keyStore -storepass ****** -keypass ****** -signedjar /Users/xr/work/test/jw-community-5.0-SNAPSHOT/wflow-designerweb/target/jnlp/commons-codec-1.2.jar /Users/xr/work/test/jw-community-5.0-SNAPSHOT/wflow-designerweb/target/jnlp/unprocessed_commons-codec-1.2.jar wflow" execution is: '127'. -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException [ERROR] [ERROR] After correcting the problems, you can resume the build with the command [ERROR] mvn <goals> -rf :wflow-designerweb

When we search something under Monitor/AuditTrail menu, the paging number are not showing correct results

Resource permissions are not working in case of User, Group permissions etc.

I am trying to use Joget to build a small app where UI will be Joget and Backend will be Mongo. I am using restheart ( https://restheart.org/) as an wrpper to coneal Mongo for Joget.

Is it possible to redenr the JSON response which I get from restheart to Joget UI?

It seemed that in wflow-consoleweb/src/main/resources/console_zh_CN.properties File,
government.qualityAssurance should be governance.qualityAssurance ?

I was unable to build whole packages. Can you guys update all dependency in pom files. Because some of it missing in maven repository.

Hi,

I was creating a nested hash variable for my form.

#user.{form.tps_mpd_req_form.tps_mpd_pln_ack_user}.firstName#

The nested variable may contain a null value if the user has not processed the request. This caused the entire hash variable processing to fail and the literal string is displayed.

This will become confusing to user.

Is it possible for you to enhance the hash variable logic to display an empty field when the nested variable is null?

Thank you!

When building from wflow-install, some of the required artifacts are not available:

[ERROR] Failed to execute goal on project wflow-jdbc: Could not resolve dependencies for project org.joget:wflow-jdbc:jar:4.0-SNAPSHOT: The following artifacts could not be resolved: com.oracle:ojdbc6:jar:12.1.0.2, com.microsoft:sqljdbc:jar:4.0: Could not find artifact com.oracle:ojdbc6:jar:12.1.0.2 in central (http://repo.maven.apache.org/maven2) -> [Help 1]

Perhaps you could add the repository definitions on the POM so that your project can more easily be built.

Description

CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files.

Details

The web application embeds untrusted user input inside the "Account ID" and "Account Name" field, there is likely more fields that are vulnerable to this, however this is just an example. In this case a simple formula was used but an attacker can use a malicious formula that might download a file from the internet and have it executed to gain access.

The following shows the CSV injection point:

Download the CSV:

Open the CSV file and observe the output:

Impact

When a spreadsheet program such as Microsoft Excel or LibreOffice Calc is used to open a CSV, any cells starting with '=' will be interpreted by the software as a formula. Maliciously crafted formulas can be used for three key attacks:

• Hijacking the user's computer by exploiting vulnerabilities in the spreadsheet software, such as CVE-2014-3524
• Hijacking the user's computer by exploiting the user's tendency to ignore security warnings in spreadsheets that they downloaded from their own website
• Exfiltrating contents from the spreadsheet, or other open spreadsheets.

Recommendation

This attack is difficult to mitigate, and explicitly disallowed from quite a few bug bounty programs. To remediate it, ensure that no cells begin with any of the following characters:

• Equals to ("=")
• Plus ("+")
• Minus ("-")
• At ("@")

References

https://www.owasp.org/index.php/CSV_Injection

Hi !

I am using Joget 6 BETA on Redhat Linux 5.11 and imported the example CRM app from Joget 5 running on Windows 8.

The CRM app on Joget 5 successfully creates the folder "wflow/app_formuploads" and I can browse to the files I have uploaded.

The same CRM app on Joget 6 accepts the file upload but the directory "app_formuploads" is never created and I can never find the file in the filesystem.

N.B. On Linux Joget 6, I have a modified version of the database setup script, as we had to run under MyISAM engine in MySQL instead of InnoDB. and the modifications are:

1) Byte size of composite varchar key was 1020 (250+90 * 3) and MyISAM is limited to 1000 bytes only:

=== original ===
CREATE TABLE SHKToolAgentApp( TOOL_AGENT_NAMEvarchar(250) NOT NULL, APP_NAMEvarchar(90) NOT NULL,

=== modified ===
CREATE TABLE SHKToolAgentApp (TOOL_AGENT_NAMEvarchar(100) NOT NULL, APP_NAMEvarchar(25) NOT NULL,

2) All engine and encoding records in the SQL script were modified to MyISAM and Latin1.

I am not sure if this change may have impacted the file upload, but I can see:

select * from SHKToolAgentApp;
returning empty set, and I guess that's because we are not using any tool in our app yet,

The Process Builder for Joget DX 8 preview version freezes as I continue to edit the process.

Steps to Reproduce

1. Create a form
2. Link the form to the UI
3. Publish the APP, test the form
4. Create a minimal process
5. Create new form and attach the process
6. Link the process to the UI
7. Test the process by login as a separate user
8. Repeat the process of editing the Process, create new Form, attach the Form to the Process
   Repeat step 8, in a few iteration the Process Builder freezes

Hello,

I have a Joget (vers 6.0.11) REST API and on GET method it doesn't decode the parameters from URL.

On your documentation I only saw encodeUrlParam:
https://dev.joget.org/community/display/KBv6/StringUtil

Please advice

Hey there, I was following the tutorial to make a travel request app. ..... so far I have created forms, datalist, userview but when I finished making process and tried deploying it it gave me an error saying:

Type=ERROR, Sub-Type=SCHEMA, Location=Package 'travelRequest': __: [Error] at line number 2: cvc-complex-type.2.4.b: The content of element 'Package' is not complete. One of '{"http://www.wfmc.org/2002/XPDL1.0":PackageHeader}' is expected._____Type=ERROR, Sub-Type=LOGIC, Location=Package 'travelRequest' -> Script: __Unsupported script language (currently suported script types are text/java, text/javascript and text/pythonscript)_

I check the send xpdl xml by clicking the debug button on the right top it gei me:

<xpdl:Package
    xmlns:xpdl="http://www.wfmc.org/2002/XPDL1.0"
    xmlns="http://www.wfmc.org/2002/XPDL1.0"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Id="travelRequest" Name="Travel Request" xsi:schemaLocation="http://www.wfmc.org/2002/XPDL1.0 http://wfmc.org/standards/docs/TC-1025_schema_10_xpdl.xsd">
    <xpdl:PackageHeader>
        <xpdl:XPDLVersion>1.0</xpdl:XPDLVersion>
        <xpdl:Vendor/>
        <xpdl:Created/>
    </xpdl:PackageHeader>
    <xpdl:Script Type="text/javascript"/>
    <xpdl:Participants>
        <xpdl:Participant Id="requester" Name="Requester">
            <xpdl:ParticipantType Type="ROLE"/>
        </xpdl:Participant>
        <xpdl:Participant Id="approver" Name="Approver">
            <xpdl:ParticipantType Type="ROLE"/>
        </xpdl:Participant>
    </xpdl:Participants>
    <xpdl:Applications>
        <xpdl:Application Id="default_application"/>
    </xpdl:Applications>
    <xpdl:WorkflowProcesses>
        <xpdl:WorkflowProcess Id="process1" Name="Travel Request">
            <xpdl:ProcessHeader DurationUnit="h"></xpdl:ProcessHeader>
            <xpdl:FormalParameters></xpdl:FormalParameters>
            <xpdl:DataFields>
                <xpdl:DataField Id="status" IsArray="FALSE">
                    <xpdl:DataType>
                        <xpdl:BasicType Type="STRING"/>
                    </xpdl:DataType>
                </xpdl:DataField>
            </xpdl:DataFields>
            <xpdl:Activities>
                <xpdl:Activity Id="submitRequest" Name="Submit Request">
                    <xpdl:Implementation>
                        <xpdl:No/>
                    </xpdl:Implementation>
                    <xpdl:Performer>requester</xpdl:Performer>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_PARTICIPANT_ID" Value="requester"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_OFFSET" Value="222,26"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Activity>
                <xpdl:Activity Id="approveRequest" Name="Approve Request">
                    <xpdl:Implementation>
                        <xpdl:No/>
                    </xpdl:Implementation>
                    <xpdl:Performer>approver</xpdl:Performer>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_PARTICIPANT_ID" Value="approver"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_OFFSET" Value="219,50"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Activity>
                <xpdl:Activity Id="route1" Name="">
                    <xpdl:Route/>
                    <xpdl:Performer>approver</xpdl:Performer>
                    <xpdl:TransitionRestrictions>
                        <xpdl:TransitionRestriction>
                            <xpdl:Split Type="XOR">
                                <xpdl:TransitionRefs>
                                    <xpdl:TransitionRef Id="transition2"/>
                                    <xpdl:TransitionRef Id="transition3"/>
                                </xpdl:TransitionRefs>
                            </xpdl:Split>
                        </xpdl:TransitionRestriction>
                    </xpdl:TransitionRestrictions>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_PARTICIPANT_ID" Value="approver"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_OFFSET" Value="395,55"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Activity>
                <xpdl:Activity Id="sendApprovedEmail" Name="Send Approved Email">
                    <xpdl:Implementation>
                        <xpdl:Tool Id="default_application"/>
                    </xpdl:Implementation>
                    <xpdl:Performer>approver</xpdl:Performer>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_PARTICIPANT_ID" Value="approver"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_OFFSET" Value="577,15"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Activity>
                <xpdl:Activity Id="sendRejectedEmail" Name="Send Rejected Email">
                    <xpdl:Implementation>
                        <xpdl:Tool Id="default_application"/>
                    </xpdl:Implementation>
                    <xpdl:Performer>approver</xpdl:Performer>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_PARTICIPANT_ID" Value="approver"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_OFFSET" Value="586,120"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Activity>
            </xpdl:Activities>
            <xpdl:Transitions>
                <xpdl:Transition From="submitRequest" Id="transition0" To="approveRequest" Name="">
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_TRANSITION_STYLE" Value="NO_ROUTING_ORTHOGONAL"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Transition>
                <xpdl:Transition From="approveRequest" Id="transition1" To="route1" Name="">
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_TRANSITION_STYLE" Value="NO_ROUTING_ORTHOGONAL"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Transition>
                <xpdl:Transition From="route1" Id="transition2" To="sendApprovedEmail" Name="">
                    <xpdl:Condition Type="CONDITION">status === 'Approved'</xpdl:Condition>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_TRANSITION_STYLE" Value="NO_ROUTING_ORTHOGONAL"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_BREAK_POINTS" Value="orthogonal"/>
                        <xpdl:ExtendedAttribute Name="PBUILDER_TRANSITION_CONDITIONS" Value="[{&quot;join&quot;:&quot;&amp;&amp;&quot;,&quot;variable&quot;:&quot;status&quot;,&quot;operator&quot;:&quot;===&quot;,&quot;value&quot;:&quot;Approved&quot;}]"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Transition>
                <xpdl:Transition From="route1" Id="transition3" To="sendRejectedEmail" Name="">
                    <xpdl:Condition Type="OTHERWISE"/>
                    <xpdl:ExtendedAttributes>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_TRANSITION_STYLE" Value="NO_ROUTING_ORTHOGONAL"/>
                        <xpdl:ExtendedAttribute Name="JaWE_GRAPH_BREAK_POINTS" Value="orthogonal"/>
                    </xpdl:ExtendedAttributes>
                </xpdl:Transition>
            </xpdl:Transitions>
            <xpdl:ExtendedAttributes>
                <xpdl:ExtendedAttribute Name="JaWE_GRAPH_WORKFLOW_PARTICIPANT_ORDER" Value="requester;approver"/>
                <xpdl:ExtendedAttribute Name="JaWE_GRAPH_START_OF_WORKFLOW" Value="JaWE_GRAPH_PARTICIPANT_ID=requester,CONNECTING_ACTIVITY_ID=submitRequest,X_OFFSET=80,Y_OFFSET=40,JaWE_GRAPH_TRANSITION_STYLE=NO_ROUTING_ORTHOGONAL,TYPE=START_DEFAULT"/>
                <xpdl:ExtendedAttribute Name="JaWE_GRAPH_END_OF_WORKFLOW" Value="JaWE_GRAPH_PARTICIPANT_ID=approver,CONNECTING_ACTIVITY_ID=sendApprovedEmail,X_OFFSET=810,Y_OFFSET=25,JaWE_GRAPH_TRANSITION_STYLE=NO_ROUTING_ORTHOGONAL,TYPE=END_DEFAULT"/>
                <xpdl:ExtendedAttribute Name="JaWE_GRAPH_END_OF_WORKFLOW" Value="JaWE_GRAPH_PARTICIPANT_ID=approver,CONNECTING_ACTIVITY_ID=sendRejectedEmail,X_OFFSET=837,Y_OFFSET=135,JaWE_GRAPH_TRANSITION_STYLE=NO_ROUTING_ORTHOGONAL,TYPE=END_DEFAULT"/>
            </xpdl:ExtendedAttributes>
        </xpdl:WorkflowProcess>
    </xpdl:WorkflowProcesses>
    <xpdl:ExtendedAttributes>
        <xpdl:ExtendedAttribute Name="EDITING_TOOL" Value="Web Workflow Designer"/>
        <xpdl:ExtendedAttribute Name="EDITING_TOOL_VERSION" Value="5.0-pre-alpha"/>
    </xpdl:ExtendedAttributes>
</xpdl:Package>

It looks so good. I debug the deploy request :

it shows a script element which cause the Unsupported script language (currently suported script types are text/java, text/javascript and text/pythonscript)

so my question is Where did the script element come from, how to fix it?

ps: I use the latest source code from the github.

Hi, joget developers. I found joget use shark 2.0.1 version.
This version of shark wflow seemed lack of supporting documentation.
Th lasted shark version is [6.5] (https://sourceforge.net/p/sharkwf/discussion/1147215/thread/abf0db5a/)
Are there any plans for an upgrade in the future?

Hi, Thank you for your excellent work. I am using joget and learn the code.
I found out that distributed transaction (bitronix) is used in commonsApplication.xml, But I'm confused why distributed transactions are needed（seemed just one Datasource), and I haven't seen where this are used, just found transactionTemplate was used in publish App, like noraml transaction.
Can you help me with my doubts?

when a add new svn repositories add url at that clicking finish button asking a user name and password , what is the user name and password.

Hi,
Any document for the installation?

When developing a DataListBinder plugin, I used a 'grid' type property for the plugin.

However, the DataListBuilderWebController does not seem to parse 'grid' type property values. I get null everytime from the property.

Dear Joget,

I created a trial cloud account and logged in admin. I exported all the sample apps and attempted to import into joget-linux-7.0.33 running on localhost. Some fail with the error message

ERROR 09 Nov 2022 08:47:04 org.joget.apps.app.service.AppServiceImpl - java.io.EOFException: Unexpected end of ZLIB input stream
java.io.EOFException: Unexpected end of ZLIB input stream

So it looks like the export is producing an incomplete file, however I cannot see why some succeed and fail. The list is as follows.

works: App Center Version 1
fails: Asset Management and Tracking Version 1
fails: Customer Relationship Management Version 1
fails: Document Repository Version 1
fails: Employee Portal Version 1
fails: Expenses Claim Version 1
fails: Internal Service Request Version 1
works: Joget Academy Version 1
works: Joget Community Q&A Version 1
fails: Joget DX Showcase Version 1
works: Joget KB Version 1
works: Service Help Desk DX Version 1
works: Travel Advisory Tracking Version 1
fails: Travel Request

The best way to debug is to attempt export on localhost, could you send me a database dump of the cloud trial instance? You can contact me [email protected]

When the form File Upload field allows for multiple uploads, Email Tool is unable to read the multiple file names and attach each file.

The following error occurs:

INFO 08 Apr 2016 15:17:07 org.joget.apps.app.lib.EmailTool - Attached file fail from field "file1" in form "mpd_request_attach"

Hi,

I'm experiencing a incontrolable grow up on Joget database table named wf_audit_trail. I don't find any documentation about how to configure a limit size for Audit Trail, and my database (MySQL) is oversized. In Joget, Monitor > Audit Trail don't load any registry, just stay "Processing, please wait...".
How can I solve this problem? Any ideas?

Version Joget: 7.0.21 (Community DX7)
Mysql: 8.0.32

Thanks!

Hi,

I may have identified a low-severity vulnerability in jogetworkflow/jw-community codebase. Please consider enabling the GitHub private vulnerability reporting so the process can go smoothly...

Thank you in advance

• https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository

Calling FormUtil.getValue for Select Box/Multi Select Box, with multiple selection enabled, returns a single selection--the first selected value.

For example, when I select "value A" and "value B" of Multi Select Box, calling FormUtil.getValue will return "value A". I expect this function to return an array or delimiter-separated values.