[ 
https://issues.apache.org/jira/browse/OFBIZ-3001?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux closed OFBIZ-3001.
----------------------------------

       Resolution: Fixed
    Fix Version/s: SVN trunk
                   Release Branch 9.04
         Assignee: Jacques Le Roux

Thank you for the report Sharan,

FIxed in trunk at r907342, r9.04 at r907344


> Create New Shopping List for Party
> ----------------------------------
>
>                 Key: OFBIZ-3001
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3001
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: party
>    Affects Versions: SVN trunk
>            Reporter: Sharan Foga
>            Assignee: Jacques Le Roux
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>
> Hi 
> I got this error message using the latest online version of the trunk 
> (821710)and am reporting it as requested. A copy of the URL is below.
> Thanks
> Sharan
> https://demo.ofbiz.org/partymgr/control/createEmptyShoppingList?partyId=DemoCustomer
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL 
> parameter [partyId] passed to secure (https) request-map with uri 
> [createEmptyShoppingList] with an event that calls service 
> [createShoppingList]; this is not allowed for security reasons! The data 
> should be encrypted by making it part of the request body (a form field) 
> instead of the request URL. Moreover it would be kind if you could create a 
> Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check 
> before if a sub-task for this error does not exist). If you are not sure how 
> to create a Jira issue please have a look before at 
> http://docs.ofbiz.org/x/r. 
> Thank you in advance for your help.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to