[jira] Created: (OFBIZ-2416) Security error on Remove return items

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

[jira] Created: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)
Security error on Remove return items
-------------------------------------

                 Key: OFBIZ-2416
                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
             Project: OFBiz
          Issue Type: Sub-task
            Reporter: Pranay Pandey




--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply | Threaded
Open this post in threaded view
|

[jira] Updated: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pranay Pandey updated OFBIZ-2416:
---------------------------------

          Component/s: order
        Fix Version/s: SVN trunk
                       Release Branch 9.04
             Priority: Minor  (was: Major)
          Description:
After creating return, Remove link is not working.

org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
    Affects Version/s: SVN trunk
                       Release Branch 9.04

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>
> After creating return, Remove link is not working.
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply | Threaded
Open this post in threaded view
|

[jira] Updated: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)
In reply to this post by Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pranay Pandey updated OFBIZ-2416:
---------------------------------

    Attachment: OFBIZ-2416.patch

Here is the patch for this issue.

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link is not working.
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply | Threaded
Open this post in threaded view
|

[jira] Updated: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)
In reply to this post by Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pranay Pandey updated OFBIZ-2416:
---------------------------------

    Description:
After creating return, Remove link to remove return items is not working.

*Showing:*
org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

  was:
After creating return, Remove link is not working.

org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.


> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working.
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply | Threaded
Open this post in threaded view
|

[jira] Assigned: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)
In reply to this post by Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Vijaywargiya reassigned OFBIZ-2416:
------------------------------------------

    Assignee: Ashish Vijaywargiya

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working.
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply | Threaded
Open this post in threaded view
|

[jira] Closed: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)
In reply to this post by Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Vijaywargiya closed OFBIZ-2416.
--------------------------------------

    Resolution: Fixed

Thanks Pranay for your contribution.

Your changes are at revision no. 770929 & 770929 (trun & release branch)

--
Ashish

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working.
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply | Threaded
Open this post in threaded view
|

[jira] Commented: (OFBIZ-2416) Security error on Remove return items

Nicolas Malin (Jira)
In reply to this post by Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12705263#action_12705263 ]

Ashish Vijaywargiya commented on OFBIZ-2416:
--------------------------------------------

Sorry there was wrong revision number pasted by me.
Here is the correct complete message.

Your changes are at revision no. 770929 & 770932 (trunk & release branch)

--
Ashish

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working.
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.