Hi Samuel,

It started with http://svn.apache.org/viewvc?view=revision&revision=764286

Then I did http://svn.apache.org/viewvc?view=revision&revision=767688

Then I created OFBIZ-2330 after OFBIZ-2332, OFBIZ-2260, OFBIZ-2256

About removing, there are still few cases popping up. What is your case? Is it 
relevant?

You are not the 1st one to question the security aspect, I commented that here: 
 https://s.apache.org/4z2bt

Thanks

Jacques

Le 18/10/2019 à 10:08, Samuel a écrit :
Hi,

recently I run against this check method which throw me an error to prevent me accessing url parameters from a service. Error message mentions a security reason to forbid accessing url parameters but I definitely don't get this, so could you explain to me the "security" reason ? or could we simply remove this check ?

Samuel

PS: I've also checked mentionned jira issue https://issues.apache.org/jira/browse/OFBIZ-2330, but this didn't help me understanding the "security" reason

Reply via email to