Question

Enhancement Needed - Obfuscate URL settings preventing Designer studio to load - PRPC 5.5

Issue :

Added system settings like below in Config.XML to prevent Cross site scripting (XSS)

<env name="Initialization/SubmitObfuscatedURL" value="required"/><env name="Initialization/Urlencryption" value="TRUE"/>

After the changes, Designer studio was not loading completely. However the end user portals are working fine as far as i tested.

Checked Logs, and spotted the below error.

com.pega.pegarules.pub.context.PRSecurityException: Obfuscation cannot be performed with a null or blank key

Comments

Keep up to date on this post and subscribe to comments

Pega
December 17, 2019 - 6:03pm

As indicated in FDBK-7879 which was generated from SA-18438, we have no plans at this time to support this enhancement.