SAP Knowledge Base Article - Public

3043893 - Validation error when searching for Item with Javascript in its title LMS

Symptom

When searching for Item title "Javascript: Objects" user is getting an error "The input data has failed to pass the security checks:
The "<javascript>" or "<script>" tags are not allowed."

Environment

SAP SuccessFactors Learning

Reproducing the Issue

  1. Create an item or Class with title and/or description as "JavaScript: Objects"
  2. As a user, search for this item in the catalog
  3. Upon searching the below error appears.


              Validation Error

             You must correct the following error(s) before proceeding:

             The input data has failed to pass the security checks:
             The "<javascript>" or "<script>" tags are not allowed.

Cause

As per our Engineering team, this issue is because of the web security scan that looks for possible XSS attacks.
Patterns like javascript: , <javascript> etc are reserved and cannot be used in item title.

Resolution

As a workaround, for example ,instead of "Javascript: Objects" as title, we can use "Javascript Objects".

See Also

https://launchpad.support.sap.com/#/notes/2771047

Keywords

The input data has failed to pass the security checks, The "<javascript>" or "<script>" tags are not allowed, javascript, script , KBA , LOD-SF-LMS-ITE , Items , Problem

Product

SAP SuccessFactors Learning 1905 ; SAP SuccessFactors Learning 1908 ; SAP SuccessFactors Learning 1911 ; SAP SuccessFactors Learning 2005 ; SAP SuccessFactors Learning 2011 ; SUCCESSFACTORS LEARNING 2111