Enhancement Needed - Obfuscate URL settings preventing Designer studio to load - PRPC 5.5

Issue :

Added system settings like below in Config.XML to prevent Cross site scripting (XSS)

<env name="Initialization/SubmitObfuscatedURL" value="required"/><env name="Initialization/Urlencryption" value="TRUE"/>

After the changes, Designer studio was not loading completely. However the end user portals are working fine as far as i tested.

Checked Logs, and spotted the below error. Obfuscation cannot be performed with a null or blank key


Keep up to date on this post and subscribe to comments

December 17, 2019 - 6:03pm

As indicated in FDBK-7879 which was generated from SA-18438, we have no plans at this time to support this enhancement.