[
https://issues.apache.org/jira/browse/OFBIZ-2526?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12713156#action_12713156
]
Vince Clark commented on OFBIZ-2526:
------------------------------------
release branch 9.04
To reproduce:
1. Go to an order
2. At the bottom in the notes widget click on create note
3. enter note and click save
4. error occurs:
The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
parameter [orderId] passed to secure (https) request-map with uri
[createordernote] with an event that calls service [createOrderNote]; this is
not allowed for security reasons! The data should be encrypted by making it
part of the request body (a form field) instead of the request URL. Moreover it
would be kind if you could create a Jira sub-task of
https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task
for this error does not exist). If you are not sure how to create a Jira issue
please have a look before at http://docs.ofbiz.org/x/r. Thank you in advance
for your help.
> Error creating order note
> -------------------------
>
> Key: OFBIZ-2526
> URL: https://issues.apache.org/jira/browse/OFBIZ-2526
> Project: OFBiz
> Issue Type: Sub-task
> Reporter: Vince Clark
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
