[ 
https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ashish Vijaywargiya closed OFBIZ-2416.
--------------------------------------

    Resolution: Fixed

Thanks Pranay for your contribution.

Your changes are at revision no. 770929 & 770929 (trun & release branch)

--
Ashish

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working. 
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] 
> passed to secure (https) request-map with uri [removeReturnItem] with an 
> event that calls service [removeReturnItem]; this is not allowed for security 
> reasons! The data should be encrypted by making it part of the request body 
> (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to