[
https://issues.apache.org/jira/browse/OFBIZ-3934?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12908496#action_12908496
]
BJ Freeman commented on OFBIZ-3934:
-----------------------------------
in short the URL has to be changed from a get to a post
> paymentMethodTypeId
> -------------------
>
> Key: OFBIZ-3934
> URL: https://issues.apache.org/jira/browse/OFBIZ-3934
> Project: OFBiz
> Issue Type: Sub-task
> Components: accounting
> Affects Versions: SVN trunk
> Environment: Debian Lenny + ofbiz-r952591
> Reporter: Jonatan Soto
> Priority: Minor
>
> Found this error when changing the records to show in the paginated list.
> [ServiceEventHandler.java:406:ERROR] =============== Found URL parameter
> [paymentMethodTypeId] passed to secure (https) request-map with uri
> [updatePaymentMethodType] with an event that calls service
> [updatePaymentMethodType]; this is not allowed for security reasons! The data
> should be encrypted by making it part of the request body (a form field)
> instead of the request URL. Moreover it would be kind if you could create a
> Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check
> before if a sub-task for this error does not exist). If you are not sure how
> to create a Jira issue please have a look before at
> http://cwiki.apache.org/confluence/x/JIB2 Thank you in advance for your
> help.; In session [FC48E005EF7E4D31A875637F52EB2934.jvm1]; Note that this can
> be changed using the service.http.parameters.require.encrypted property in
> the url.properties file
> 2010-09-11 17:22:06,390 (TP-Processor11) [ RequestHandler.java:421:ERROR]
> Request updatePaymentMethodType caused an error with the following message:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
> parameter [paymentMethodTypeId] passed to secure (https) request-map with uri
> [updatePaymentMethodType] with an event that calls service
> [updatePaymentMethodType]; this is not allowed for security reasons! The data
> should be encrypted by making it part of the request body (a form field)
> instead of the request URL. Moreover it would be kind if you could create a
> Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check
> before if a sub-task for this error does not exist). If you are not sure how
> to create a Jira issue please have a look before at
> http://cwiki.apache.org/confluence/x/JIB2 Thank you in advance for your help.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
