SUPEE-6788_CE_1.7.0.2 - Broke block to show last products on home page

[Oxegena]

Hi,

Since I applied the 6788 patch on a CE 1.7.0.2 installation, a block doesn't show up with last products on home page.

The block contains this line:

 {{block type="catalog/product_list" category_id="3" num_products="4" template="catalog/random.phtml"}}

If I remove that particular line, it shows up again on the home page.

So what to do in order to maintain the display of last products if I can't use this line?

Thx.

[chiefair · Accepted solution]

There is a whitelist that must be maintained for non-standard vars that are added to CMS

APPSEC-1057: search for {{config path= and {{block type= in all PHP files of local and community modules, and filter out all elements from the whitelist.

How to add items to that whitelist has not been explained yet.

Hint here => http://magento.stackexchange.com/questions/87466/appsec-1057-how-to-add-variables-or-blocks-to-the-w...

[Oxegena · Accepted solution]

Thx, I managed to have everything working fine by following this procedure:

1) use/follow script as described here: http://magento.stackexchange.com/questions/87466/appsec-1057-how-to-add-variables-or-blocks-to-the-w...

2) update any extension through Magento Connect (so it triggers the script created in 1)

3) use https://github.com/rhoerr/supee-6788-toolbox