Hi Ashish,

You may try to use a form instead of an url with parameters.

Regards

Pierre
On 25/07/2015 08:04, Ashish Repal wrote:
Hi All,
I am getting below exception when calling the service from controller.

[ServiceEventHandler.java:408:ERROR] =============== Found URL parameter
[shipId] passed to secure (https) request-map with uri
[ModifyShipmentStatus] with an event that calls service
[ModifyShipmentStatus]; this is not allowed for security reasons! The data
should be encrypted by making it part of the request body (a form field)
instead of the request URL.

anyone has idea about this?

controller.xml:

     <request-map uri="ModifyShipmentStatus">
          <security https="true" auth="true" />
         <event type="service" path="" invoke="ModifyShipmentStatus"/>
         <response name="success" type="view" value="EditTrip"/>
         <response name="error" type="view" value="EditTrip"/>
     </request-map>

If I comment the security tag in controller it works but later it fails
saying

org.ofbiz.webapp.control.RequestHandlerException: Not accepting insecure
form data posted to a secure request



Regards,
Aashish Repal
09623381664



--
logoNrd <http://nereide.fr/>
        Pierre GAUDIN
Consultant Fonctionnel Apache-OFBiz, ERP en logiciel Libre
informat...@nereide.fr
3bis rue des Isles 37270 VERETZ
Std: 02 47 50 30 54 - mob: 06 08 40 25 70

ofbiz-fr <http://www.ofbiz-fr.org/> | réseau LE <http://www.libre-entreprise.org/>

Reply via email to