[ 
https://issues.apache.org/jira/browse/OFBIZ-2725?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12730217#action_12730217
 ] 

chris snow commented on OFBIZ-2725:
-----------------------------------

The following error was received when I clicked on "remove" for some content in 
the party content window on the party view profile screen:

org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [partyId] 
passed to secure (https) request-map with uri [removePartyContent] with an 
event that calls service [removePartyContent]; this is not allowed for security 
reasons! The data should be encrypted by making it part of the request body (a 
form field) instead of the request URL. Moreover it would be kind if you could 
create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 
(check before if a sub-task for this error does not exist). If you are not sure 
how to create a Jira issue please have a look before at 
http://docs.ofbiz.org/x/r. Thank you in advance for your help.

> removePartyContent from party profile screen
> --------------------------------------------
>
>                 Key: OFBIZ-2725
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2725
>             Project: OFBiz
>          Issue Type: Sub-task
>            Reporter: chris snow
>


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to