Details
-
Sub-task
-
Status: Closed
-
Major
-
Resolution: Cannot Reproduce
-
None
-
None
-
Bug Crush Event - 21/2/2015
Description
Found URL parameter [glAccountTypeId] passed to secure (https) request-map with uri [createGlAccountTypeD
fault] with an event that calls service [createGlAccountTypeDefault]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of threquest URL.