Security error on Remove return items
------------------------------------- Key: OFBIZ-2416 URL: https://issues.apache.org/jira/browse/OFBIZ-2416 Project: OFBiz Issue Type: Sub-task Reporter: Pranay Pandey -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
[ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pranay Pandey updated OFBIZ-2416: --------------------------------- Component/s: order Fix Version/s: SVN trunk Release Branch 9.04 Priority: Minor (was: Major) Description: After creating return, Remove link is not working. org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Affects Version/s: SVN trunk Release Branch 9.04 > Security error on Remove return items > ------------------------------------- > > Key: OFBIZ-2416 > URL: https://issues.apache.org/jira/browse/OFBIZ-2416 > Project: OFBiz > Issue Type: Sub-task > Components: order > Affects Versions: Release Branch 9.04, SVN trunk > Reporter: Pranay Pandey > Priority: Minor > Fix For: Release Branch 9.04, SVN trunk > > > After creating return, Remove link is not working. > org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
In reply to this post by Nicolas Malin (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pranay Pandey updated OFBIZ-2416: --------------------------------- Attachment: OFBIZ-2416.patch Here is the patch for this issue. > Security error on Remove return items > ------------------------------------- > > Key: OFBIZ-2416 > URL: https://issues.apache.org/jira/browse/OFBIZ-2416 > Project: OFBiz > Issue Type: Sub-task > Components: order > Affects Versions: Release Branch 9.04, SVN trunk > Reporter: Pranay Pandey > Priority: Minor > Fix For: Release Branch 9.04, SVN trunk > > Attachments: OFBIZ-2416.patch > > > After creating return, Remove link is not working. > org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
In reply to this post by Nicolas Malin (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pranay Pandey updated OFBIZ-2416: --------------------------------- Description: After creating return, Remove link to remove return items is not working. *Showing:* org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. was: After creating return, Remove link is not working. org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. > Security error on Remove return items > ------------------------------------- > > Key: OFBIZ-2416 > URL: https://issues.apache.org/jira/browse/OFBIZ-2416 > Project: OFBiz > Issue Type: Sub-task > Components: order > Affects Versions: Release Branch 9.04, SVN trunk > Reporter: Pranay Pandey > Priority: Minor > Fix For: Release Branch 9.04, SVN trunk > > Attachments: OFBIZ-2416.patch > > > After creating return, Remove link to remove return items is not working. > *Showing:* > org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
In reply to this post by Nicolas Malin (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ashish Vijaywargiya reassigned OFBIZ-2416: ------------------------------------------ Assignee: Ashish Vijaywargiya > Security error on Remove return items > ------------------------------------- > > Key: OFBIZ-2416 > URL: https://issues.apache.org/jira/browse/OFBIZ-2416 > Project: OFBiz > Issue Type: Sub-task > Components: order > Affects Versions: Release Branch 9.04, SVN trunk > Reporter: Pranay Pandey > Assignee: Ashish Vijaywargiya > Priority: Minor > Fix For: Release Branch 9.04, SVN trunk > > Attachments: OFBIZ-2416.patch > > > After creating return, Remove link to remove return items is not working. > *Showing:* > org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
In reply to this post by Nicolas Malin (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ashish Vijaywargiya closed OFBIZ-2416. -------------------------------------- Resolution: Fixed Thanks Pranay for your contribution. Your changes are at revision no. 770929 & 770929 (trun & release branch) -- Ashish > Security error on Remove return items > ------------------------------------- > > Key: OFBIZ-2416 > URL: https://issues.apache.org/jira/browse/OFBIZ-2416 > Project: OFBiz > Issue Type: Sub-task > Components: order > Affects Versions: Release Branch 9.04, SVN trunk > Reporter: Pranay Pandey > Assignee: Ashish Vijaywargiya > Priority: Minor > Fix For: Release Branch 9.04, SVN trunk > > Attachments: OFBIZ-2416.patch > > > After creating return, Remove link to remove return items is not working. > *Showing:* > org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
In reply to this post by Nicolas Malin (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12705263#action_12705263 ] Ashish Vijaywargiya commented on OFBIZ-2416: -------------------------------------------- Sorry there was wrong revision number pasted by me. Here is the correct complete message. Your changes are at revision no. 770929 & 770932 (trunk & release branch) -- Ashish > Security error on Remove return items > ------------------------------------- > > Key: OFBIZ-2416 > URL: https://issues.apache.org/jira/browse/OFBIZ-2416 > Project: OFBiz > Issue Type: Sub-task > Components: order > Affects Versions: Release Branch 9.04, SVN trunk > Reporter: Pranay Pandey > Assignee: Ashish Vijaywargiya > Priority: Minor > Fix For: Release Branch 9.04, SVN trunk > > Attachments: OFBIZ-2416.patch > > > After creating return, Remove link to remove return items is not working. > *Showing:* > org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. |
Free forum by Nabble | Edit this page |