[
https://issues.apache.org/jira/browse/OFBIZ-4110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12981655#action_12981655
]
Andrey Mitroshin edited comment on OFBIZ-4110 at 1/14/11 2:30 AM:
------------------------------------------------------------------
its strange.
Besides, when I'm trying to delete one of the predefined time periods I'm
getting the following message
The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
parameter [customTimePeriodId] passed to secure (https) request-map with uri
[deleteCustomTimePeriod] with an event that calls service
[deleteCustomTimePeriod]; this is not allowed for security reasons! The data
should be encrypted by making it part of the request body (a form field)
instead of the request URL. Moreover it would be kind if you could create a
Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before
if a sub-task for this error does not exist). If you are not sure how to create
a Jira issue please have a look before at http://docs.ofbiz.org/x/r. Thank you
in advance for your help.
Unfortunately I cant provide you with URL because of my network security policy.
How to reproduce:
Accounting->Global GL settings -> edit custom time periods -> on ID 6001, press
"delete button"
Error log follows:
2011-01-14 10:26:36,841 (http-0.0.0.0-8443-1) [ Log4JLoggerFactory.java:96
:ERROR]
Expression allCustomTimePeriod.periodNum is undefined on line 256, column 19 in
component://accounting/webapp/accounting/period/EditCustomTimePeriod.ftl.
The problematic instruction:
----------
==> ${allCustomTimePeriod.periodNum} [on line 256, column 17 in
component://accounting/webapp/accounting/period/EditCustomTimePeriod.ftl]
----------
Java backtrace for programmers:
----------
freemarker.core.InvalidReferenceException: Expression
allCustomTimePeriod.periodNum is undefined on line 256, column 19 in
component://accounting/webapp/accounting/period/EditCustomTimePeriod.ftl.
at freemarker.core.TemplateObject.assertNonNull(TemplateObject.java:124)
at freemarker.core.Expression.getStringValue(Expression.java:118)
at freemarker.core.Expression.getStringValue(Expression.java:93)
at freemarker.core.DollarVariable.accept(DollarVariable.java:76)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.MixedContent.accept(MixedContent.java:92)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.IteratorBlock$Context.runLoop(IteratorBlock.java:167)
at freemarker.core.Environment.visit(Environment.java:416)
at freemarker.core.IteratorBlock.accept(IteratorBlock.java:102)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.MixedContent.accept(MixedContent.java:92)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.IfBlock.accept(IfBlock.java:82)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.MixedContent.accept(MixedContent.java:92)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.Environment.process(Environment.java:189)
at
org.ofbiz.base.util.template.FreeMarkerWorker.renderTemplate(FreeMarkerWorker.java:210)
at
org.ofbiz.widget.screen.HtmlWidget.renderHtmlTemplate(HtmlWidget.java:201)
at
org.ofbiz.widget.screen.HtmlWidget$HtmlTemplate.renderWidgetString(HtmlWidget.java:245)
at
org.ofbiz.widget.screen.HtmlWidget.renderWidgetString(HtmlWidget.java:107)
at
org.ofbiz.widget.screen.ModelScreenWidget$PlatformSpecific.renderWidgetString(ModelScreenWidget.java:976)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:676)
at
org.ofbiz.widget.screen.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:167)
at
org.ofbiz.widget.screen.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:706)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$DecoratorSection.renderWidgetString(ModelScreenWidget.java:676)
at
org.ofbiz.widget.screen.ModelScreenWidget$SectionsRenderer.render(ModelScreenWidget.java:167)
at
org.ofbiz.widget.screen.ModelScreenWidget$DecoratorSectionInclude.renderWidgetString(ModelScreenWidget.java:706)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:292)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:292)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Container.renderWidgetString(ModelScreenWidget.java:292)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:227)
at
org.ofbiz.widget.screen.ModelScreen.renderScreenString(ModelScreen.java:393)
at
org.ofbiz.widget.screen.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:552)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:227)
at
org.ofbiz.widget.screen.ModelScreen.renderScreenString(ModelScreen.java:393)
at
org.ofbiz.widget.screen.ModelScreenWidget$IncludeScreen.renderWidgetString(ModelScreenWidget.java:552)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:227)
at
org.ofbiz.widget.screen.ModelScreen.renderScreenString(ModelScreen.java:393)
at
org.ofbiz.widget.screen.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:646)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:227)
at
org.ofbiz.widget.screen.ModelScreen.renderScreenString(ModelScreen.java:393)
at
org.ofbiz.widget.screen.ModelScreenWidget$DecoratorScreen.renderWidgetString(ModelScreenWidget.java:646)
at
org.ofbiz.widget.screen.ModelScreenWidget.renderSubWidgetsString(ModelScreenWidget.java:138)
at
org.ofbiz.widget.screen.ModelScreenWidget$Section.renderWidgetString(ModelScreenWidget.java:227)
at
org.ofbiz.widget.screen.ModelScreen.renderScreenString(ModelScreen.java:393)
at
org.ofbiz.widget.screen.ScreenRenderer.render(ScreenRenderer.java:132)
at org.ofbiz.widget.screen.ScreenRenderer.render(ScreenRenderer.java:92)
at
org.ofbiz.widget.screen.ScreenWidgetViewHandler.render(ScreenWidgetViewHandler.java:98)
at
org.ofbiz.webapp.control.RequestHandler.renderView(RequestHandler.java:789)
at
org.ofbiz.webapp.control.RequestHandler.doRequest(RequestHandler.java:533)
at
org.ofbiz.webapp.control.ControlServlet.doGet(ControlServlet.java:202)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:259)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
at
org.ofbiz.catalina.container.CrossSubdomainSessionValve.invoke(CrossSubdomainSessionValve.java:62)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:595)
Thanks!
was (Author: akamit):
its strange.
Besides, when I'm trying to delete one of the predefined time periods I'm
getting the following message
The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
parameter [customTimePeriodId] passed to secure (https) request-map with uri
[deleteCustomTimePeriod] with an event that calls service
[deleteCustomTimePeriod]; this is not allowed for security reasons! The data
should be encrypted by making it part of the request body (a form field)
instead of the request URL. Moreover it would be kind if you could create a
Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before
if a sub-task for this error does not exist). If you are not sure how to create
a Jira issue please have a look before at http://docs.ofbiz.org/x/r. Thank you
in advance for your help.
Unfortunately I cant provide you with URL because of my network security policy.
How to reproduce:
Accounting->Global GL settings -> edit custom time periods -> on ID 6001, press
"delete button"
Thanks!
> Error while viewing list of time periods
> ----------------------------------------
>
> Key: OFBIZ-4110
> URL: https://issues.apache.org/jira/browse/OFBIZ-4110
> Project: OFBiz
> Issue Type: Sub-task
> Components: accounting
> Affects Versions: Release Branch 09.04
> Environment: OS: SunOS 5.9
> kernel: Generic_122300-49
> Machine: sun4u sparc SUNW,Netra-T12
> java version "1.5.0_09"
> Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_09-b03)
> Java HotSpot(TM) Server VM (build 1.5.0_09-b03, mixed mode)
> Reporter: Andrey Mitroshin
> Priority: Minor
>
> I've created custom time period in organization GL setting as follows
> Custom Time Period Id Parent Period Id Period Type Id Period
> Num Period Name From Date Thru Date
> 10001 Fiscal Year 1 2011 2011-01-01
> 2011-12-31
> when I'm viewing list of time periods I'm getting a message on the last page
> (where my new time period resides)
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
> parameter [periodTypeId] passed to secure (https) request-map with uri
> [createCustomTimePeriod] with an event that calls service
> [createCustomTimePeriod]; this is not allowed for security reasons! The data
> should be encrypted by making it part of the request body (a form field)
> instead of the request URL. Moreover it would be kind if you could create a
> Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check
> before if a sub-task for this error does not exist). If you are not sure how
> to create a Jira issue please have a look before at
> http://docs.ofbiz.org/x/r. Thank you in advance for your help.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
