SAP Knowledge Base Article - Public

3033584 - Ticket Attachments Chameleon File (i.e GIFAR) detected

Symptom

When opening a Ticket, the attachment is missing and an error message is being raised at the Ticket Interactions

Error message: Content in Object ABC Blocked, rule violation "Chameleon File (i.e GIFAR) detected".

Environment

 SAP Cloud for Customer

Reproducing the Issue

  1. Go to the Service work center.
  2. Select the Tickets view.
  3. Open the Ticket ABC (ABC represents the Ticket ID).
  4. Go to the Interactions facet , there following message is displayed Content in Object "ABC" Blocked, rule violation "Chameleon File (i.e GIFAR) detected" 
  5. Go to the Attachments facet, the attachment is not visible there.

Cause

Graphics Interchange Format Java Archives (GIFAR) GIFAR is a term meaning GIF image files combined with Java ARchives (JAR). Technically JAR files are archive files that include a Java-specific manifest file/content.

Whenever, there is any active content in the e-mail mime, the system marks that mail as harmful content and displays only plain-text in the UI. Therefore, none of the rich text or inline images are shown in the interaction and the same is applicable equally in a stringent way when uploading the files (this means if you try uploading the same file, the same behavior will happen).

As a security measure from SAP, any active content in the mime while uploading ex: Javascripts that may harm the entire system, will be blocked. All content is scanned based on a scan profile that is present in the SAP scanner.

Resolution

We do support images and all other tags but our security scans are more stringent. Security is something that cannot be compromised. However, there is always the option to download the original content manually, this will open the outside our application.

Since security measures cannot be changed, as a workaround you may try converting the files via other tools, like Paint to to a file format that is accepted by C4C, like JPG , JPEG etc.

Keywords

Attachment Missing; Blocked; , KBA , LOD-CRM-SRP , Service Request Processing , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions