SAP Knowledge Base Article - Public

2771047 - "The input data has failed to pass the security checks" error received when trying to record history for a Class

Symptom

When trying to record learning as an admin for a Class we get the below error message:

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental

Environment

SAP Successfactors Learning

Reproducing the Issue

1. Create an Item and in Item title add the text as "eval ()" in some form e.g. "eval (test)"

2. Create a Class for the item and enroll users into it

3. Once the class is ended, navigate to the class-> Click on Actions > Add to Learning History

4. Error is received:

Validation Error

You must correct the following error(s) before proceeding:

  • The input data has failed to pass the security checks:
    The "eval()" expression is not allowed.

    Cause

    System validates and prevents the customers from using any learning entities having "eval()" pattern in them. This validation is in place in the system to avoid any security threats injected by external attacks. "Eval()" pattern is related to javascript injection in the request payload and hence it will be flagged by the system.

    Resolution

    Change the Item title to something else which does not include "eval()" pattern like using "evals" instead of "eval" OR replace the parenthesis with other characters e.g. use [] instead of ().

    Keywords

    The input data has failed to pass the security checks, The "eval()" expression is not allowed, eval(), eval (), Add to Learning History, Class, Item, LRN-54250 , KBA , LOD-SF-LMS-SCH , Class - Scheduled Offerings , LOD-SF-LMS-ITE , Items , Problem

    Product

    SAP SuccessFactors Learning all versions