You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by "Pranay Pandey (JIRA)" <ji...@apache.org> on 2009/05/02 11:35:35 UTC

[jira] Created: (OFBIZ-2416) Security error on Remove return items

Security error on Remove return items
-------------------------------------

                 Key: OFBIZ-2416
                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
             Project: OFBiz
          Issue Type: Sub-task
            Reporter: Pranay Pandey




-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Closed: (OFBIZ-2416) Security error on Remove return items

Posted by "Ashish Vijaywargiya (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Vijaywargiya closed OFBIZ-2416.
--------------------------------------

    Resolution: Fixed

Thanks Pranay for your contribution.

Your changes are at revision no. 770929 & 770929 (trun & release branch)

--
Ashish

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working. 
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (OFBIZ-2416) Security error on Remove return items

Posted by "Ashish Vijaywargiya (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12705263#action_12705263 ] 

Ashish Vijaywargiya commented on OFBIZ-2416:
--------------------------------------------

Sorry there was wrong revision number pasted by me.
Here is the correct complete message.

Your changes are at revision no. 770929 & 770932 (trunk & release branch)

--
Ashish

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working. 
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (OFBIZ-2416) Security error on Remove return items

Posted by "Pranay Pandey (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pranay Pandey updated OFBIZ-2416:
---------------------------------

    Attachment: OFBIZ-2416.patch

Here is the patch for this issue.

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link is not working. 
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Assigned: (OFBIZ-2416) Security error on Remove return items

Posted by "Ashish Vijaywargiya (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Vijaywargiya reassigned OFBIZ-2416:
------------------------------------------

    Assignee: Ashish Vijaywargiya

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working. 
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (OFBIZ-2416) Security error on Remove return items

Posted by "Pranay Pandey (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pranay Pandey updated OFBIZ-2416:
---------------------------------

    Description: 
After creating return, Remove link to remove return items is not working. 

*Showing:*
org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

  was:
After creating return, Remove link is not working. 

org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.


> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>         Attachments: OFBIZ-2416.patch
>
>
> After creating return, Remove link to remove return items is not working. 
> *Showing:*
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (OFBIZ-2416) Security error on Remove return items

Posted by "Pranay Pandey (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OFBIZ-2416?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pranay Pandey updated OFBIZ-2416:
---------------------------------

          Component/s: order
        Fix Version/s: SVN trunk
                       Release Branch 9.04
             Priority: Minor  (was: Major)
          Description: 
After creating return, Remove link is not working. 

org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.
    Affects Version/s: SVN trunk
                       Release Branch 9.04

> Security error on Remove return items
> -------------------------------------
>
>                 Key: OFBIZ-2416
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2416
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: order
>    Affects Versions: Release Branch 9.04, SVN trunk
>            Reporter: Pranay Pandey
>            Priority: Minor
>             Fix For: Release Branch 9.04, SVN trunk
>
>
> After creating return, Remove link is not working. 
> org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [returnId] passed to secure (https) request-map with uri [removeReturnItem] with an event that calls service [removeReturnItem]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.