Admin Console is corrupting the content used in Form Fill, Rewriter and Advanced Option

  • 7022051
  • 09-Oct-2017
  • 09-Oct-2017

Environment


Access Manager 4.4

Situation

NAM Admin Console is upgraded from 4.4.
Create a FormFill/Rewriter/AG Advance Option with content document.* or windows.* ( eg document.write, windows.open).
Open the policy again and all the content will be changed to hex characters.
For example: A java script containing line windows.defaultStatus = "xyz" will change to 20 = "xyz"

Resolution

1. Add below filter configuration in web.xml
file path: /var/opt/novell/tomcat/webapps/roma/WEB-INF/web.xml
<filter>
  <filter-name>namRomaXssFilter</filter-name>
  <filter-class>com.volera.roma.app.handler.filters.XssFilter</filter-class>
</filter>
<filter-mapping>
  <filter-name>namRomaXssFilter</filter-name>
  <url-pattern>/dummyURl</url-pattern>
</filter-mapping>

2. Restart Admin Console
rcnovell-ac restart

Bug Number

1059264