[
https://issues.apache.org/jira/browse/OFBIZ-3001?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jacques Le Roux closed OFBIZ-3001.
----------------------------------
Resolution: Fixed
Fix Version/s: SVN trunk
Release Branch 9.04
Assignee: Jacques Le Roux
Thank you for the report Sharan,
FIxed in trunk at r907342, r9.04 at r907344
> Create New Shopping List for Party
> ----------------------------------
>
> Key: OFBIZ-3001
> URL: https://issues.apache.org/jira/browse/OFBIZ-3001
> Project: OFBiz
> Issue Type: Sub-task
> Components: party
> Affects Versions: SVN trunk
> Reporter: Sharan Foga
> Assignee: Jacques Le Roux
> Priority: Minor
> Fix For: Release Branch 9.04, SVN trunk
>
>
> Hi
> I got this error message using the latest online version of the trunk
> (821710)and am reporting it as requested. A copy of the URL is below.
> Thanks
> Sharan
> https://demo.ofbiz.org/partymgr/control/createEmptyShoppingList?partyId=DemoCustomer
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
> parameter [partyId] passed to secure (https) request-map with uri
> [createEmptyShoppingList] with an event that calls service
> [createShoppingList]; this is not allowed for security reasons! The data
> should be encrypted by making it part of the request body (a form field)
> instead of the request URL. Moreover it would be kind if you could create a
> Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check
> before if a sub-task for this error does not exist). If you are not sure how
> to create a Jira issue please have a look before at
> http://docs.ofbiz.org/x/r.
> Thank you in advance for your help.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.