[
https://issues.apache.org/jira/browse/OFBIZ-2452?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12707710#action_12707710
]
BJ Freeman commented on OFBIZ-2452:
-----------------------------------
I know this has been discussed on the dev list. I would love to provide
patches. I am guessing this has to be changed to a post, if I understand
right.
it seems most of the delete button in catalog section come up with
similar messages.
https://localhost:8443/catalog/control/promo_deleteProductStorePromoAppl?productStoreId=TestStore&productPromoId=9019&fromDate=2009-04-27%2015:11:56.0
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found
URL parameter [productStoreId] passed to secure (https) request-map with
uri [promo_deleteProductStorePromoAppl] with an event that calls service
[deleteProductStorePromoAppl]; this is not allowed for security reasons!
The data should be encrypted by making it part of the request body (a
form field) instead of the request URL.
> Security error in Catalog. Trying to delete
> -------------------------------------------
>
> Key: OFBIZ-2452
> URL: https://issues.apache.org/jira/browse/OFBIZ-2452
> Project: OFBiz
> Issue Type: Sub-task
> Reporter: BJ Freeman
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
