Symptom
While adding hyperlinks to item descriptions, you may receive a pop-up with the error message: "HTML text entered did not pass AntiSamy validation."
Environment
SAP SuccessFactors Learning
Reproducing the Issue
- Edit the description of an item >
- Click on the 'Insert/edit link' button >
- Enter a URL >
- Change the 'Target' to 'New Window' >
- Click 'Save and Close' or 'Save' to see the error.
Cause
The 'enableAntiSamyForHTMLContent' feature is enabled in the System Configuration.
AntiSamy is a security framework used to enforce restrictions on HTML content by sanitizing or removing HTML code that can be used maliciously. This is intended to prevent potentially malicious data from entering the system.
Resolution
- You can choose not to change the target for the URL, leaving the target as the default <not set>.
- The setting 'enableAntiSamyForHTMLContent' serves as an additional defense measure. You may also choose to disable it.
- To turn this feature on or off, you may change the following configuration: System Administration > Configuration > System Configuration > Web_Security > enableAntiSamyForHTMLContent.
Keywords
HTML Text entered did not pass AntiSamy validation, connector, lms, validation, exception, sf, item, description, link, URL, AntiSamy, learning , KBA , LOD-SF-LMS-CON , Connectors , LOD-SF-LMS-ITE , Items , Problem
Product
SAP SuccessFactors Learning all versions
SAP Knowledge Base Article - Public