Error:The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

[Jack Liu-2]

Hi, All

I updated to the latest Trunk version, while I am getting the following
error below when I click the menu:

org.ofbiz.webapp.event.EventHandlerException: Found URL parameter
[customerid] passed to secure (https) request-map with uri [extras] with
an event that calls service [getCustomerExtra]; this is not allowed for
security reasons! The data should be encrypted by making it part of the
request body (a form field) instead of the request URL.

I notice that the menu's link is strange and it doesn't show like I
want.
The actual link is:
javascript:document.CustomerMenu_customerextra_LF_2.submit()
While in menu.xml:
<menu-item name="customerextra" title="Customer Extra">
                        <link target="extras?customerid=${customerid}"
/>
</menu-item>

How should I do?


Best Regards,

Jack Liu