[
https://issues.apache.org/jira/browse/OFBIZ-2430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Vikas Mayur closed OFBIZ-2430.
------------------------------
Resolution: Fixed
Thanks Rohit,
Part of your patch that is applicable only for Secured URLs in FTL is in trunk
rev. 823518
Also the changes are only applicable to trunk because this file does not exists
in release09.04.
Vikas
> Delete survey associated with a task
> ------------------------------------
>
> Key: OFBIZ-2430
> URL: https://issues.apache.org/jira/browse/OFBIZ-2430
> Project: OFBiz
> Issue Type: Sub-task
> Components: specialpurpose/projectmgr
> Affects Versions: SVN trunk
> Reporter: Vikas Mayur
> Assignee: Vikas Mayur
> Fix For: SVN trunk
>
> Attachments: DeleteSurveyAssociatedWithTask.patch
>
>
> Steps to reproduce this error:
> 1) Go to Project Manager app.
> 2) Select a project from the list. This will show up the project summary page.
> 3) Select any task from the Tasks screenlet. This will show up the task
> summary page.
> 4) Now click on the Surveys tab.
> 5) Add a survey (if there is not in the list).
> 6) Click on the Delete link and the error would be visible.
> Error log:
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
> parameter [workEffortId] passed to secure (https) request-map with uri
> [deleteWorkEffortSurveyAppl] with an event that calls service
> [deleteWorkEffortSurveyAppl]; this is not allowed for security reasons! The
> data should be encrypted by making it part of the request body (a form field)
> instead of the request URL.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
