Mohammed Rehan Khan created OFBIZ-7306: ------------------------------------------
Summary: Delete Customer Tax Auth Info link is not working - Security Error Key: OFBIZ-7306 URL: https://issues.apache.org/jira/browse/OFBIZ-7306 Project: OFBiz Issue Type: Sub-task Components: specialpurpose/ecommerce Affects Versions: Release Branch 15.12, Trunk, Release Branch 14.12, Release Branch 13.07 Reporter: Mohammed Rehan Khan Assignee: Mohammed Rehan Khan Steps to reproduce: 1) Go to eCommerce 2) Click on profile tab 3) Add customer tax auth info from "Tax Identification and Exemption" section. 4) Click on delete icon. Getting following security error: Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [partyId] passed to secure (https) request-map with uri [deleteCustomerTaxAuthInfo] with an event that calls service [deletePartyTaxAuthInfo]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. -- This message was sent by Atlassian JIRA (v6.3.4#6332)