SAP Knowledge Base Article - Public

2460670 - Avoid the "<javascript>" or "<script>" tags are not allowed' Error in the Module Tabs Configurations.

Symptom

Few customers will perform customizations to the Module Tabs in the configurations and get below validation error.

javascript.png

Environment

SuccessFactors Learning Management System (LMS) - All Supported Versions

Reproducing the Issue

Module tab: you can affect the underlying Struts actions in the administrator interface through module tab configuration.

In Start of the navigation path System Admin > Configuration >Module tab .

Cause

In LMS under System Configuration > Configuration > Web_Security some JavaScript security filters are enabled to stop vulnerable cross site scripting attacks.

Since few Module tabs will have JAVASECURITY filter codes enabled, LMS won't allow the admins to change any available settings.

Resolution

Follow the below navigation steps :

System Admin > Configuration > System Configuration > WEB_SECURITY and set the below property to false.

enableXSSFilters=false

NOTE : Once you set the above property to false, LMS will allow admins to customize the Module Tabs. Once the changes are saved, re-enable the property to true as shown below.

enableXSSFilters=true

Keywords

The "<javascript>" or "<script>" tags are not allowed , Module tab , Assignement profile, javascript, script, tags , KBA , LOD-SF-LMS-COR , LMS Core - Items, Catalog, Curricula , How To

Product

SAP SuccessFactors Learning all versions