Symptom
When searching for Item title "Javascript: Objects" user is getting an error "The input data has failed to pass the security checks:
The "<javascript>" or "<script>" tags are not allowed."
Environment
SAP SuccessFactors Learning
Reproducing the Issue
- Create an item or Class with title and/or description as "JavaScript: Objects"
- As a user, search for this item in the catalog
- Upon searching the below error appears.
Validation Error
You must correct the following error(s) before proceeding:
The input data has failed to pass the security checks:
The "<javascript>" or "<script>" tags are not allowed.
Cause
As per our Engineering team, this issue is because of the web security scan that looks for possible XSS attacks.
Patterns like javascript: , <javascript> etc are reserved and cannot be used in item title.
Resolution
As a workaround, for example ,instead of "Javascript: Objects" as title, we can use "Javascript Objects".
See Also
Keywords
The input data has failed to pass the security checks, The "<javascript>" or "<script>" tags are not allowed, javascript, script , KBA , LOD-SF-LMS-ITE , Items , Problem
SAP Knowledge Base Article - Public