3290787 - How to maintain entries in transaction UCON_CHW

• When using browser based applications (for example: WebGUI, Web Dynpro, BSP, Fiori, and so on), an HTTP 500 error is displayed with the message "URL Parameter <Unknown> does not exist in HTTP whitelist (termination: RABAX_STATE)" or "URL parameter sap-theme does not exist in HTTP whitelist (termination: RABAX_STATE)".
• Runtime errors (short dumps) of type UNCAUGHT_EXCEPTION / CX_HTTP_WHITELIST occur. The "Error analysis" section of the dump contains an error message, similar to the ones below:
• "URL Parameter <Unknown> does not exist in HTTP whitelist"
• "URL Parameter sap-theme does not exist in HTTP whitelist"
• It is unclear which entries should be maintained in transaction UCON_CHW.

Note: there are two solutions for HTTP allowlist, read SAP Note 2667053 - CX_HTTP_WHITELIST was raised - for details.

1. The older solution is using the database table HTTP_WHITELIST - for this, read KBA 2578665 - How to maintain the table HTTP_WHITELIST.
2. The more recent solution is UCON Allowlist, delivered with SAP Note 2573569 - UCON HTTP Allowlist Downport. The scope of this KBA is the maintenance of UCON Allowlist.

Both solutions provide a similar functionality, and only one of these solutions is active in any NW ABAP system at any time. The above mentioned symptoms may be caused either by an incorrectly/incompletely maintained HTTP_WHITELIST table, or an incorrectly/incompletely maintained UCON Allowlist, depending on which one is active in the system.
If unsure which whitelist/allowlist is used, call the transaction UCON_CHW and check the system response:

• If a welcome popup is displayed or the transaction does not exist, then the classic HTTP_WHITELIST is used.
  
  
  
  
• If the transaction is displayed without a welcome popup, then the UCON Allowlist is used.
• To change back from UCON to the classic HTTP_WHITELIST table, use menu option HTTP Whitelist - Back to old Maint.
  
  

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Read more...

• UCONCOCKPIT/UCON_CHW is used for HTTP allowlist
• SAP NetWeaver 7.4
• SAP NetWeaver 7.5
• SAP NetWeaver Application Server 7.51 for SAP S/4HANA 1610 (SAP_BASIS 7.51)
• SAP NetWeaver Application Server for ABAP 7.52 for SAP S/4HANA (SAP_BASIS 7.52)
• ABAP PLATFORM 1809 - Application Server ABAP (SAP_BASIS 7.53)
• ABAP PLATFORM 1909 - Application Server ABAP (SAP_BASIS 7.54)
• ABAP PLATFORM 2020 - Application Server ABAP (SAP_BASIS 7.55)
• ABAP PLATFORM 2021 - Application Server ABAP (SAP_BASIS 7.56)
• ABAP PLATFORM 2022 - Application Server ABAP (SAP_BASIS 7.57)
• ABAP PLATFORM 2023 - Application Server ABAP (SAP_BASIS 7.58)

ABAP platform 1809 ; ABAP platform 1909 ; ABAP platform 2020 ; ABAP platform 2021 ; ABAP platform 2022 ; ABAP platform 2023 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Application Server 7.51 for SAP S/4HANA 1610 ; SAP NetWeaver Application Server for ABAP 7.52 for SAP S/4HANA ; SAP enhancement package 1 for SAP NetWeaver 7.0 ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 2 for SAP NetWeaver 7.0 ; SAP enhancement package 3 for SAP NetWeaver 7.0

ICF, Internet Communication Framework, SICF, Service, Services, ICF service, ICF_GDPR, ICF_STD, UCONCOCKPIT, UCON_CHW, CX_HTTP_WHITELIST , dump, ST22, application not loaded, URL Parameter, is not available in the HTTP allowlist, 500 Internal Server Error, UNCAUGHT_EXCEPTION, CL_HTTP_UTILITY, CHECK_HTTP_WHITELIST , input entry, scheme rule, host rule, port rule, path rule, compare rule, namespace, universal resource ID, sap gateway, ecc system, context types, CSS Style sheet, trusted network zone, CORS, cross origin resource sharing, clickjacking framing protection, HTTP Whitelist tool for unified connectivity, execute selection, method, URL, LV_URL, parameter, abap expresssion, HTTP_WHITELIST, old maintenance, Logged HTTP Whitelist Checks, To whitelist, active check, client, all client, client dependent, URL Parameter does not exist in HTTP whitelist, <unknown>, sap-theme, Sales Analysis App, CX_HTTP_WHITELIST=============CP , KBA , BC-MID-ICF , Internet Communication Framework , How To