OFBiz › OFBiz - Notifications

[jira] [Commented] (OFBIZ-12014) Error while decoding url parameters with percent character

‹ Previous Topic Next Topic ›
 
classic Classic list List threaded Threaded
♦
♦
 1 message Options
Nicolas Malin (Jira)
Reply | Threaded
Open this post in threaded view
♦
♦
|

[jira] [Commented] (OFBIZ-12014) Error while decoding url parameters with percent character

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-12014?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17195314#comment-17195314 ]

Jacques Le Roux commented on OFBIZ-12014:
-----------------------------------------

Thanks Pradeep

This is indeed the best thing to do. I totally missed the point when I committed for OFBIZ-11822 which was wrong.

Moreover we have nothing to fear with multiple encoding. Not only the information will be shown in the log. But also in, at least, the case of makeHyperlinkString macro, Freemarker is rejecting a double encoded string like %253Cscript%253Ealert('XSS')%253C%252Fscript%253E (found at bottom of https://owasp.org/www-community/Double_Encoding):

{noformat}
2020-09-14 11:01:23,065 |sse-nio-8443-exec-10 |RequestHandler                |I| Rendering View [orderview].  Hidden sessionId by default.
2020-09-14 11:01:23,065 |sse-nio-8443-exec-10 |UtilCodec                     |W| Multiple (2x) encoding detected in %253Cscript%253Ealert('XSS')%253C%252Fscript%253E
2020-09-14 11:01:23,065 |sse-nio-8443-exec-10 |UtilCodec                     |W| Multiple (2x) encoding detected in %253Cscript%253Ealert('XSS')%253C%252Fscript%253E
2020-09-14 11:01:23,066 |sse-nio-8443-exec-10 |ServiceDispatcher             |T| Sync service [order/getUserPreferenceGroup] finished in [1] milliseconds
2020-09-14 11:01:23,066 |sse-nio-8443-exec-10 |UtilCodec                     |W| Multiple (2x) encoding detected in %253Cscript%253Ealert('XSS')%253C%252Fscript%253E
2020-09-14 11:01:36,172 |sse-nio-8443-exec-10 |UtilCodec                     |W| Multiple (3x) encoding detected in %25253Cscript%25253Ealert%28%27XSS%27%29%25253C%25252Fscript%25253E
2020-09-14 11:02:06,843 |sse-nio-8443-exec-10 |UtilCodec                     |W| Multiple (3x) encoding detected in %25253Cscript%25253Ealert%28%27XSS%27%29%25253C%25252Fscript%25253E
2020-09-14 11:02:06,843 |sse-nio-8443-exec-10 |UtilCodec                     |W| Multiple (2x) encoding detected in %253Cscript%253Ealert('XSS')%253C%252Fscript%253E
2020-09-14 11:02:06,853 |sse-nio-8443-exec-10 |ScreenFactory                 |I| Got 33 screens in 0.007s from: file:/C:/projectsASF/Git/ofbiz-framework/applications/order/widget/ordermgr/OrderViewScreens.xml
2020-09-14 11:02:07,653 |sse-nio-8443-exec-10 |ScreenFactory                 |I| Got 4 screens in 0.005s from: file:/C:/projectsASF/Git/ofbiz-framework/applications/order/widget/ordermgr/CommonScreens.xml
2020-09-14 11:02:07,659 |sse-nio-8443-exec-10 |ScreenFactory                 |I| Got 1 screens in 0.005s from: file:/C:/projectsASF/Git/ofbiz-framework/applications/commonext/widget/CommonScreens.xml
2020-09-14 11:02:07,732 |sse-nio-8443-exec-10 |ServiceDispatcher             |T| Sync service [order/getLastSystemInfoNote] finished in [10] milliseconds
2020-09-14 11:02:07,741 |sse-nio-8443-exec-10 |ScreenFactory                 |I| Got 26 screens in 0.005s from: file:/C:/projectsASF/Git/ofbiz-framework/framework/common/widget/CommonScreens.xml
2020-09-14 11:02:07,923 |sse-nio-8443-exec-10 |ScreenFactory                 |I| Got 25 screens in 0.006s from: file:/C:/projectsASF/Git/ofbiz-framework/themes/common-theme/widget/CommonScreens.xml
2020-09-14 11:02:08,027 |sse-nio-8443-exec-10 |ConfigXMLReader               |I| controller loaded: 0.0s, 0 requests, 0 views in file:/C:/projectsASF/Git/ofbiz-framework/framework/common/webcommon/WEB-INF/handlers-controller.xml
2020-09-14 11:02:08,027 |sse-nio-8443-exec-10 |ConfigXMLReader               |I| controller loaded: 0.018s, 51 requests, 21 views in file:/C:/projectsASF/Git/ofbiz-framework/framework/common/webcommon/WEB-INF/common-controller.xml
2020-09-14 11:02:08,045 |sse-nio-8443-exec-10 |ConfigXMLReader               |I| controller loaded: 0.0s, 4 requests, 0 views in file:/C:/projectsASF/Git/ofbiz-framework/applications/commonext/webapp/WEB-INF/controller.xml
2020-09-14 11:02:08,070 |sse-nio-8443-exec-10 |ConfigXMLReader               |I| controller loaded: 0.004s, 379 requests, 154 views in file:/C:/projectsASF/Git/ofbiz-framework/applications/content/webapp/content/WEB-INF/controller.xml
2020-09-14 11:02:08,073 |sse-nio-8443-exec-10 |ConfigXMLReader               |I| controller loaded: 0.081s, 379 requests, 153 views in file:/C:/projectsASF/Git/ofbiz-framework/applications/order/webapp/ordermgr/WEB-INF/controller.xml
2020-09-14 11:02:08,073 |sse-nio-8443-exec-10 |ConfigXMLReader               |I| controller loaded: 0.103s, 16 requests, 14 views in file:/C:/projectsASF/Git/ofbiz-framework/plugins/birt/webapp/ordermgr/WEB-INF/controller.xml
2020-09-14 11:02:08,143 |sse-nio-8443-exec-10 |FreeMarkerWorker              |E| null
freemarker.core._MiscTemplateException: Failed to "?eval" string with this error:

---begin-message---
Syntax error in ?eval-ed string in line 1, column 65:
Encountered "XSS", but was expecting one of:
    "."
    ".."
    <DOT_DOT_LESS>
    "..*"
    "?"
    "??"
    "!"
    ","
    "["
    "("
    "}"
    <TERMINATING_EXCLAM>
---end-message---

The failing expression:
==> targetParameters?eval  [in template "component://common-theme/template/macro/HtmlFormMacroLibrary.ftl" at line 707, column 34]

----
FTL stack trace ("~" means nesting-related):
        - Failed at: #local parameterMap = targetParameter...  [in template "component://common-theme/template/macro/HtmlFormMacroLibrary.ftl" in macro "makeHyperlinkString" at line 707, column 11]
        - Reached through: @makeHyperlinkString linkStyle="" hid...  [in template "d339825:1748bc7fd51:-7fa6" at line 1, column 1]
----
        at freemarker.core.BuiltInsForStringsMisc$evalBI.calculateResult(BuiltInsForStringsMisc.java:95) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.BuiltInsForStringsMisc$evalBI.calculateResult(BuiltInsForStringsMisc.java:61) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.OutputFormatBoundBuiltIn._eval(OutputFormatBoundBuiltIn.java:42) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Expression.eval(Expression.java:101) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Assignment.accept(Assignment.java:134) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:334) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:340) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:376) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.invokeMacroOrFunctionCommonPart(Environment.java:876) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.invokeMacro(Environment.java:812) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.UnifiedCall.accept(UnifiedCall.java:84) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:334) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.include(Environment.java:2925) [freemarker-2.3.30.jar:2.3.30]
        at org.apache.ofbiz.widget.renderer.macro.FtlWriter.executeMacro(FtlWriter.java:56) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.executeMacro(MacroFormRenderer.java:171) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.makeHyperlinkString(MacroFormRenderer.java:3393) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.makeHyperlinkByType(MacroFormRenderer.java:3280) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.renderHyperlinkField(MacroFormRenderer.java:335) [main/:?]
        at org.apache.ofbiz.widget.model.ModelFormField$HyperlinkField.renderFieldString(ModelFormField.java:3154) [main/:?]
        at org.apache.ofbiz.widget.model.ModelFormField.renderFieldString(ModelFormField.java:799) [main/:?]
        at org.apache.ofbiz.widget.renderer.FormRenderer.renderSingleFormString(FormRenderer.java:1166) [main/:?]
        at org.apache.ofbiz.widget.renderer.FormRenderer.render(FormRenderer.java:264) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Form.renderWidgetString(ModelScreenWidget.java:1092) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroScreenRenderer.renderScreenletSubWidget(MacroScreenRenderer.java:718) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Screenlet.renderWidgetString(ModelScreenWidget.java:625) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:941) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:136) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:980) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:941) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:136) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:980) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:894) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:894) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.renderer.ScreenRenderer.render(ScreenRenderer.java:146) [main/:?]
        at org.apache.ofbiz.widget.renderer.ScreenRenderer.render(ScreenRenderer.java:104) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroScreenViewHandler.render(MacroScreenViewHandler.java:116) [main/:?]
        at org.apache.ofbiz.webapp.control.RequestHandler.renderView(RequestHandler.java:1185) [main/:?]
        at org.apache.ofbiz.webapp.control.RequestHandler.doRequest(RequestHandler.java:909) [main/:?]
        at org.apache.ofbiz.webapp.control.ControlServlet.handle(ControlServlet.java:231) [main/:?]
        at org.apache.ofbiz.webapp.control.ControlServlet.doGet(ControlServlet.java:96) [main/:?]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:626) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:733) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) [tomcat-embed-websocket-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.SameSiteFilter.doFilter(SameSiteFilter.java:45) [main/:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:185) [main/:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:156) [main/:?]
        at javax.servlet.http.HttpFilter.doFilter(HttpFilter.java:52) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) [log4j-web-2.11.2.jar:2.11.2]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:690) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:373) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1589) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote-9.0.37.jar:9.0.37]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_202]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_202]
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util-9.0.37.jar:9.0.37]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_202]
2020-09-14 11:02:08,144 |sse-nio-8443-exec-10 |FreeMarkerWorker              |E| null
freemarker.core.InvalidReferenceException: The following has evaluated to null or missing:
==> parameterMap  [in template "component://common-theme/template/macro/HtmlFormMacroLibrary.ftl" at line 708, column 35]

----
Tip: If the failing expression is known to legally refer to something that's sometimes null or missing, either specify a default value like myOptionalVar!myDefault, or use <#if myOptionalVar??>when-present<#else>when-missing</#if>. (Thes
e only cover the last step of the expression; to cover the whole expression, use parenthesis: (myOptionalVar.foo)!myDefault, (myOptionalVar.foo)??
----

----
FTL stack trace ("~" means nesting-related):
        - Failed at: #local parameterKeys = parameterMap?keys  [in template "component://common-theme/template/macro/HtmlFormMacroLibrary.ftl" in macro "makeHyperlinkString" at line 708, column 11]
        - Reached through: @makeHyperlinkString linkStyle="" hid...  [in template "d339825:1748bc7fd51:-7fa6" at line 1, column 1]
----
        at freemarker.core.InvalidReferenceException.getInstance(InvalidReferenceException.java:134) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.UnexpectedTypeException.newDescriptionBuilder(UnexpectedTypeException.java:85) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.UnexpectedTypeException.<init>(UnexpectedTypeException.java:48) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.NonExtendedHashException.<init>(NonExtendedHashException.java:47) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.BuiltInForHashEx._eval(BuiltInForHashEx.java:35) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Expression.eval(Expression.java:101) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Assignment.accept(Assignment.java:134) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:334) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:340) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:376) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.invokeMacroOrFunctionCommonPart(Environment.java:876) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.invokeMacro(Environment.java:812) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.UnifiedCall.accept(UnifiedCall.java:84) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:334) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.include(Environment.java:2925) [freemarker-2.3.30.jar:2.3.30]
        at org.apache.ofbiz.widget.renderer.macro.FtlWriter.executeMacro(FtlWriter.java:56) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.executeMacro(MacroFormRenderer.java:171) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.makeHyperlinkString(MacroFormRenderer.java:3393) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.makeHyperlinkByType(MacroFormRenderer.java:3280) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.renderHyperlinkField(MacroFormRenderer.java:335) [main/:?]
        at org.apache.ofbiz.widget.model.ModelFormField$HyperlinkField.renderFieldString(ModelFormField.java:3154) [main/:?]
        at org.apache.ofbiz.widget.model.ModelFormField.renderFieldString(ModelFormField.java:799) [main/:?]
        at org.apache.ofbiz.widget.renderer.FormRenderer.renderSingleFormString(FormRenderer.java:1166) [main/:?]
        at org.apache.ofbiz.widget.renderer.FormRenderer.render(FormRenderer.java:264) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Form.renderWidgetString(ModelScreenWidget.java:1092) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroScreenRenderer.renderScreenletSubWidget(MacroScreenRenderer.java:718) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Screenlet.renderWidgetString(ModelScreenWidget.java:625) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:941) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:136) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:980) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:941) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:136) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:980) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:894) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:894) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.renderer.ScreenRenderer.render(ScreenRenderer.java:146) [main/:?]
        at org.apache.ofbiz.widget.renderer.ScreenRenderer.render(ScreenRenderer.java:104) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroScreenViewHandler.render(MacroScreenViewHandler.java:116) [main/:?]
        at org.apache.ofbiz.webapp.control.RequestHandler.renderView(RequestHandler.java:1185) [main/:?]
        at org.apache.ofbiz.webapp.control.RequestHandler.doRequest(RequestHandler.java:909) [main/:?]
        at org.apache.ofbiz.webapp.control.ControlServlet.handle(ControlServlet.java:231) [main/:?]
        at org.apache.ofbiz.webapp.control.ControlServlet.doGet(ControlServlet.java:96) [main/:?]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:626) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:733) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) [tomcat-embed-websocket-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.SameSiteFilter.doFilter(SameSiteFilter.java:45) [main/:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:185) [main/:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:156) [main/:?]
        at javax.servlet.http.HttpFilter.doFilter(HttpFilter.java:52) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) [log4j-web-2.11.2.jar:2.11.2]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:690) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:373) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1589) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote-9.0.37.jar:9.0.37]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_202]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_202]
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util-9.0.37.jar:9.0.37]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_202]
2020-09-14 11:02:08,144 |sse-nio-8443-exec-10 |FreeMarkerWorker              |E| null
freemarker.core.InvalidReferenceException: The following has evaluated to null or missing:
==> parameterKeys  [in template "component://common-theme/template/macro/HtmlFormMacroLibrary.ftl" at line 709, column 18]

----
Tip: If the failing expression is known to legally refer to something that's sometimes null or missing, either specify a default value like myOptionalVar!myDefault, or use <#if myOptionalVar??>when-present<#else>when-missing</#if>. (Thes
e only cover the last step of the expression; to cover the whole expression, use parenthesis: (myOptionalVar.foo)!myDefault, (myOptionalVar.foo)??
----

----
FTL stack trace ("~" means nesting-related):
        - Failed at: #list parameterKeys as key  [in template "component://common-theme/template/macro/HtmlFormMacroLibrary.ftl" in macro "makeHyperlinkString" at line 709, column 11]
        - Reached through: @makeHyperlinkString linkStyle="" hid...  [in template "d339825:1748bc7fd51:-7fa6" at line 1, column 1]
----
        at freemarker.core.InvalidReferenceException.getInstance(InvalidReferenceException.java:134) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Expression.assertNonNull(Expression.java:249) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.IteratorBlock.acceptWithResult(IteratorBlock.java:104) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.IteratorBlock.accept(IteratorBlock.java:94) ~[freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:334) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:340) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:376) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.invokeMacroOrFunctionCommonPart(Environment.java:876) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.invokeMacro(Environment.java:812) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.UnifiedCall.accept(UnifiedCall.java:84) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.visit(Environment.java:334) [freemarker-2.3.30.jar:2.3.30]
        at freemarker.core.Environment.include(Environment.java:2925) [freemarker-2.3.30.jar:2.3.30]
        at org.apache.ofbiz.widget.renderer.macro.FtlWriter.executeMacro(FtlWriter.java:56) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.executeMacro(MacroFormRenderer.java:171) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.makeHyperlinkString(MacroFormRenderer.java:3393) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.makeHyperlinkByType(MacroFormRenderer.java:3280) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroFormRenderer.renderHyperlinkField(MacroFormRenderer.java:335) [main/:?]
        at org.apache.ofbiz.widget.model.ModelFormField$HyperlinkField.renderFieldString(ModelFormField.java:3154) [main/:?]
        at org.apache.ofbiz.widget.model.ModelFormField.renderFieldString(ModelFormField.java:799) [main/:?]
        at org.apache.ofbiz.widget.renderer.FormRenderer.renderSingleFormString(FormRenderer.java:1166) [main/:?]
        at org.apache.ofbiz.widget.renderer.FormRenderer.render(FormRenderer.java:264) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Form.renderWidgetString(ModelScreenWidget.java:1092) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroScreenRenderer.renderScreenletSubWidget(MacroScreenRenderer.java:718) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Screenlet.renderWidgetString(ModelScreenWidget.java:625) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:941) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:136) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:980) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:941) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:136) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:980) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:475) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:813) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:894) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.model.ScreenFactory.renderReferencedScreen(ScreenFactory.java:214) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:894) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:107) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:291) [main/:?]
        at org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:157) [main/:?]
        at org.apache.ofbiz.widget.renderer.ScreenRenderer.render(ScreenRenderer.java:146) [main/:?]
        at org.apache.ofbiz.widget.renderer.ScreenRenderer.render(ScreenRenderer.java:104) [main/:?]
        at org.apache.ofbiz.widget.renderer.macro.MacroScreenViewHandler.render(MacroScreenViewHandler.java:116) [main/:?]
        at org.apache.ofbiz.webapp.control.RequestHandler.renderView(RequestHandler.java:1185) [main/:?]
        at org.apache.ofbiz.webapp.control.RequestHandler.doRequest(RequestHandler.java:909) [main/:?]
        at org.apache.ofbiz.webapp.control.ControlServlet.handle(ControlServlet.java:231) [main/:?]
        at org.apache.ofbiz.webapp.control.ControlServlet.doGet(ControlServlet.java:96) [main/:?]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:626) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:733) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) [tomcat-embed-websocket-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.SameSiteFilter.doFilter(SameSiteFilter.java:45) [main/:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:185) [main/:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:156) [main/:?]
        at javax.servlet.http.HttpFilter.doFilter(HttpFilter.java:52) [tomcat-servlet-api-9.0.37.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) [log4j-web-2.11.2.jar:2.11.2]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:690) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) [tomcat-catalina-9.0.37.jar:9.0.37]
        at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:373) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1589) [tomcat-coyote-9.0.37.jar:9.0.37]
        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote-9.0.37.jar:9.0.37]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_202]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_202]
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util-9.0.37.jar:9.0.37]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_202]
2020-09-14 11:02:08,146 |sse-nio-8443-exec-10 |IterateSectionWidget          |W| TargetService is empty.
2020-09-14 11:02:08,152 |sse-nio-8443-exec-10 |ServerHitBin                  |I| Visit delegatorName=default, ServerHitBin delegatorName=default
2020-09-14 11:02:08,155 |sse-nio-8443-exec-10 |ControlServlet                |T| [[[ordermgr::orderview (Domain:https://localhost)] Request Done- total:45.238,since last([ordermgr::orderv...):45.238]]
{noformat}

I revert in all supported branches...

> Error while decoding url parameters with percent character
> ----------------------------------------------------------
>
>                 Key: OFBIZ-12014
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12014
>             Project: OFBiz
>          Issue Type: Bug
>          Components: base
>    Affects Versions: Release Branch 17.12, Trunk
>            Reporter: Pradeep Choudhary
>            Assignee: Jacques Le Roux
>            Priority: Major
>         Attachments: OFBIZ-12014.patch, Screenshot from 2020-09-14 12-02-00.png
>
>
> When we pass any URL parameter with a percent character, it throws an exception stating the following message:
> "java.lang.IllegalArgumentException: URLDecoder: Illegal hex characters in escape (%) pattern - For input string: "
> Steps to regenerate:
> 1. Open web tools.
> 2. Navigate to Order Manager component [https://localhost:8443/ordermgr/control/findorders]
> 3. Search order by entering order Id like %Test%.
> 4. It will show an error message "java.lang.IllegalArgumentException: URLDecoder: Illegal hex characters in escape (%) pattern - For input string: "Te"



--
This message was sent by Atlassian Jira
(v8.3.4#803005)
Free forum by Nabble Edit this page