[OFBIZ-12363] Error while executing generateBlogRssFeed

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 18.12.01
• Fix Version/s: 18.12.02
• Assignee: Wiebke Paetzold
• Reporter: Wiebke Paetzold
• Created: 04/Nov/21 14:16
• Updated: 12/Nov/21 15:04
• Resolved: 12/Nov/21 15:04

Description

As jleroux mentioned on the dev-Mailinglist there is an error while executing the generateBlogRssFeed.

To reproduce go to:

https://demo-trunk.ofbiz.apache.org/ecomseo/ViewBlogRss?entryLinkReq=ViewBlogArticle&mainLinkReq=MainBlog&blogContentId=BLOGROOTBIGAL

on the Release18.12 Branch

 

Logged Error:

Found URL parameter [blogContentId] passed to secure (https) request-map with uri [ViewBlogRss] with an event that calls service [generateBl
ogRssFeed]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

Issue Links

• links to: GitHub Pull Request #335