Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Cannot Reproduce
    • Affects Version/s: None
    • Fix Version/s: 16.11.01
    • Component/s: accounting
    • Labels:
      None
    • Sprint:
      Bug Crush Event - 21/2/2015

      Description

      Found URL parameter [glAccountTypeId] passed to secure (https) request-map with uri [createGlAccountTypeD
      fault] with an event that calls service [createGlAccountTypeDefault]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of threquest URL.

        Attachments

          Activity

            People

            • Assignee:
              jacques.le.roux Jacques Le Roux
              Reporter:
              jacques.le.roux Jacques Le Roux
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: