[
https://issues.apache.org/jira/browse/OFBIZ-5763?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14128117#comment-14128117
]
Pierre Smits commented on OFBIZ-5763:
-------------------------------------
So, from a form in a screen accessed via a secure request-map you pass through
a parameter to another secure request-map that cals a service to get some
result back?
I have the same issue in a somewhat similar aspect using
getDependentDropdownValues to get some results back in a json format.
How to circumvent this?
> createGlAccountTypeDefault generate an error in log
> ---------------------------------------------------
>
> Key: OFBIZ-5763
> URL: https://issues.apache.org/jira/browse/OFBIZ-5763
> Project: OFBiz
> Issue Type: Sub-task
> Components: accounting
> Reporter: Jacques Le Roux
>
> Found URL parameter [glAccountTypeId] passed to secure (https) request-map
> with uri [createGlAccountTypeD
> fault] with an event that calls service [createGlAccountTypeDefault]; this is
> not allowed for security reasons! The data should be encrypted by making it
> part of the request body (a form field) instead of threquest URL.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
