Question

WorkLink encryption problem

Hi,

I use WorkLink Corr-Fragment in the emails that I send to the users for case approval. However the url which pega generated is very clear text string. I mean user can see the access group and work pool, even the work id, thus one can change the id of the case and go to that case immediately.

It seem pega uses URL encryption function but I am not sure if it works properly.

tools.putSaveValue("RedirectLocation", pega_rules_utilities.encodeURLParameter("pyActivity=Work-.Open&Action=Review&HarnessPurpose=Review&InsHandle="+ insHandle));

Can anyone give me additional information about encryption of work link ?

Thank you.

Comments

Keep up to date on this post and subscribe to comments