Symptom
When trying to record learning as an admin for a Class we get the below error message:
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental
Environment
SAP Successfactors Learning
Reproducing the Issue
1. Create an Item and in Item title add the text as "eval ()" in some form e.g. "eval (test)"
2. Create a Class for the item and enroll users into it
3. Once the class is ended, navigate to the class-> Click on Actions > Add to Learning History
4. Error is received:
Validation Error
You must correct the following error(s) before proceeding:
- The input data has failed to pass the security checks:
The "eval()" expression is not allowed.
Cause
System validates and prevents the customers from using any learning entities having "eval()" pattern in them. This validation is in place in the system to avoid any security threats injected by external attacks. "Eval()" pattern is related to javascript injection in the request payload and hence it will be flagged by the system.
Resolution
Change the Item title to something else which does not include "eval()" pattern like using "evals" instead of "eval" OR replace the parenthesis with other characters e.g. use [] instead of ().
Keywords
The input data has failed to pass the security checks, The "eval()" expression is not allowed, eval(), eval (), Add to Learning History, Class, Item, LRN-54250 , KBA , LOD-SF-LMS-SCH , Class - Scheduled Offerings , LOD-SF-LMS-ITE , Items , Problem