[jira] Created: (OFBIZ-2350) Showing up on create of contact mech

[Nicolas Malin (Jira)]

Showing up on create of contact mech
------------------------------------

                 Key: OFBIZ-2350
                 URL: https://issues.apache.org/jira/browse/OFBIZ-2350
             Project: OFBiz
          Issue Type: Sub-task
            Reporter: John D. Hays




--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

John D. Hays updated OFBIZ-2350:
--------------------------------

          Description:
The Following Errors Occurred:

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [contactMechId] passed to secure (https) request-map with uri [createPartyContactMechPurpose] with an event that calls service [createPartyContactMechPurpose]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

=======
https://localhost:8443/ecommerce/control/createPartyContactMechPurpose?contactMechId=10003&useValues=true

Fails when adding "Purpose" on first submit, then is OK on resubmit
          Environment: Mac OS X
    Affects Version/s: Release Branch 9.04

> Showing up on create of contact mech
> ------------------------------------
>
>                 Key: OFBIZ-2350
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2350
>             Project: OFBiz
>          Issue Type: Sub-task
>    Affects Versions: Release Branch 9.04
>         Environment: Mac OS X
>            Reporter: John D. Hays
>
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [contactMechId] passed to secure (https) request-map with uri [createPartyContactMechPurpose] with an event that calls service [createPartyContactMechPurpose]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
> =======
> https://localhost:8443/ecommerce/control/createPartyContactMechPurpose?contactMechId=10003&useValues=true
> Fails when adding "Purpose" on first submit, then is OK on resubmit

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Nagar updated OFBIZ-2350:
--------------------------------

    Attachment: editcontactmech.patch

Hello John D.,

Thanks for reporting this issue. Here is the patch for resolving the same.

--
Ashish Nagar

> Showing up on create of contact mech
> ------------------------------------
>
>                 Key: OFBIZ-2350
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2350
>             Project: OFBiz
>          Issue Type: Sub-task
>    Affects Versions: Release Branch 9.04
>         Environment: Mac OS X
>            Reporter: John D. Hays
>         Attachments: editcontactmech.patch
>
>
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [contactMechId] passed to secure (https) request-map with uri [createPartyContactMechPurpose] with an event that calls service [createPartyContactMechPurpose]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
> =======
> https://localhost:8443/ecommerce/control/createPartyContactMechPurpose?contactMechId=10003&useValues=true
> Fails when adding "Purpose" on first submit, then is OK on resubmit

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vikas Mayur reassigned OFBIZ-2350:
----------------------------------

    Assignee: Vikas Mayur

> Showing up on create of contact mech
> ------------------------------------
>
>                 Key: OFBIZ-2350
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2350
>             Project: OFBiz
>          Issue Type: Sub-task
>    Affects Versions: Release Branch 9.04
>         Environment: Mac OS X
>            Reporter: John D. Hays
>            Assignee: Vikas Mayur
>         Attachments: editcontactmech.patch
>
>
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [contactMechId] passed to secure (https) request-map with uri [createPartyContactMechPurpose] with an event that calls service [createPartyContactMechPurpose]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
> =======
> https://localhost:8443/ecommerce/control/createPartyContactMechPurpose?contactMechId=10003&useValues=true
> Fails when adding "Purpose" on first submit, then is OK on resubmit

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vikas Mayur updated OFBIZ-2350:
-------------------------------

    Affects Version/s: SVN trunk
        Fix Version/s: SVN trunk
                       Release Branch 9.04

> Showing up on create of contact mech
> ------------------------------------
>
>                 Key: OFBIZ-2350
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2350
>             Project: OFBiz
>          Issue Type: Sub-task
>    Affects Versions: Release Branch 9.04, SVN trunk
>         Environment: Mac OS X
>            Reporter: John D. Hays
>            Assignee: Vikas Mayur
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: editcontactmech.patch
>
>
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [contactMechId] passed to secure (https) request-map with uri [createPartyContactMechPurpose] with an event that calls service [createPartyContactMechPurpose]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
> =======
> https://localhost:8443/ecommerce/control/createPartyContactMechPurpose?contactMechId=10003&useValues=true
> Fails when adding "Purpose" on first submit, then is OK on resubmit

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vikas Mayur closed OFBIZ-2350.
------------------------------

    Resolution: Fixed

Thanks John for reporting.

Thanks Ashish, Your patch is in trunk rev. 768220 and release09.04 at rev. 768228.

> Showing up on create of contact mech
> ------------------------------------
>
>                 Key: OFBIZ-2350
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2350
>             Project: OFBiz
>          Issue Type: Sub-task
>    Affects Versions: Release Branch 9.04, SVN trunk
>         Environment: Mac OS X
>            Reporter: John D. Hays
>            Assignee: Vikas Mayur
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: editcontactmech.patch
>
>
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [contactMechId] passed to secure (https) request-map with uri [createPartyContactMechPurpose] with an event that calls service [createPartyContactMechPurpose]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
> =======
> https://localhost:8443/ecommerce/control/createPartyContactMechPurpose?contactMechId=10003&useValues=true
> Fails when adding "Purpose" on first submit, then is OK on resubmit

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.