[ 
https://issues.apache.org/jira/browse/OFBIZ-2517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sharan Foga updated OFBIZ-2517:
-------------------------------

    Fix Version/s: Release Branch 9.04
      Description: 
I got this error message and am reporting it as requested. A copy of the URL is 
below.

Thanks
Sharan

https://10.1.1.5:8443/accounting/control/updateInvoiceItemType?invoiceItemTypeId=CRT_TE_ITEM&defaultGlAccountId=424000&description=Return+Time-Entry+Item&VIEW_SIZE_1=20&VIEW_INDEX_1=0#
The Following Errors Occurred:

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL 
parameter [invoiceItemTypeId] passed to secure (https) request-map with uri 
[updateInvoiceItemType] with an event that calls service 
[updateInvoiceItemType]; this is not allowed for security reasons! The data 
should be encrypted by making it part of the request body (a form field) 
instead of the request URL.

Moreover it would be kind if you could create a Jira sub-task of 
https://issues.apache.org/jira/browse/OFBIZ-2330
(check before if a sub-task for this error does not exist).
If you are not sure how to create a Jira issue please have a look before at 
http://docs.ofbiz.org/x/r.

Thank you in advance for your help.



> Updating Invoice Item Type in Global GL Settings
> ------------------------------------------------
>
>                 Key: OFBIZ-2517
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2517
>             Project: OFBiz
>          Issue Type: Sub-task
>            Reporter: Sharan Foga
>             Fix For: Release Branch 9.04
>
>
> I got this error message and am reporting it as requested. A copy of the URL 
> is below.
> Thanks
> Sharan
> https://10.1.1.5:8443/accounting/control/updateInvoiceItemType?invoiceItemTypeId=CRT_TE_ITEM&defaultGlAccountId=424000&description=Return+Time-Entry+Item&VIEW_SIZE_1=20&VIEW_INDEX_1=0#
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL 
> parameter [invoiceItemTypeId] passed to secure (https) request-map with uri 
> [updateInvoiceItemType] with an event that calls service 
> [updateInvoiceItemType]; this is not allowed for security reasons! The data 
> should be encrypted by making it part of the request body (a form field) 
> instead of the request URL.
> Moreover it would be kind if you could create a Jira sub-task of 
> https://issues.apache.org/jira/browse/OFBIZ-2330
> (check before if a sub-task for this error does not exist).
> If you are not sure how to create a Jira issue please have a look before at 
> http://docs.ofbiz.org/x/r.
> Thank you in advance for your help.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to