In Content Manager component Remove Survey question link of Edit survey
question page is showing error.
---------------------------------------------------------------------------------------------------------
Key: OFBIZ-2993
URL: https://issues.apache.org/jira/browse/OFBIZ-2993
Project: OFBiz
Issue Type: Sub-task
Components: content
Affects Versions: Release Branch 9.04, SVN trunk
Reporter: Rohit Jain
Fix For: Release Branch 9.04, SVN trunk
In Content Manager component Remove Survey question link of Edit survey
question page is showing error.
Steps to reproduce this error:
1) Go to Content Manager Application.
https://demo.ofbiz.org/content/control/main
2) Select Survey tab.
https://demo.ofbiz.org/content/control/FindSurvey
3) Click on Find button it will give survey list.
4) Select a Survey from list it will show a EditSurvey page.
https://demo.ofbiz.org/content/control/EditSurvey?surveyId=1001
5) Select Questions tab it will show EditSurveyQuestions page.
https://demo.ofbiz.org/content/control/EditSurveyQuestions?surveyId=1001
6) On this page in "Edit Survey Questions Survey ID..." screenlet there is a
Remove link with every survey.
7) Click on the Remove link and the error would be visible.
Error log:
The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
parameter [surveyId] passed to secure (https) request-map with uri
[removeSurveyQuestionAppl] with an event that calls service
[deleteSurveyQuestionAppl]; this is not allowed for security reasons! The data
should be encrypted by making it part of the request body (a form field)
instead of the request URL...
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
