Symptom
Security Error is sometimes triggered when special symbols are used in goal text or textarea fields:
"The given value Security Scan has failed for value 'Goal text' being supplied for field type 'String'. Input that is associated with malicious activity is not permitted based on the current security configurations found in Admin Tools -> Application Security Feature Settings."
Environment
SAP SuccessFactors Performance & Goals
Reproducing the Issue
- Go to Admin Center - Application Security Feature Settings.
- Turn on the Security Scan of User Inputs: With this feature enabled, user inputs are scanned for security and rejected if any malicious content is identified.
- Go to Goals menu and create a new goal with any text or text-area field containing special symbols such as "=", ">", "<".
- Observe the security error preventing the saving of the goal
Resolution
This is current expected behaviour, the security setting enabled is scanning the input text and some combinations of words and symbols could be perceived as potentially malicious code.
Please avoid using special symbols while creating goals.
Workarounds:
- replace special symbols symbols with words;
- separate special symbols with punctuation marks (space, dot, colon etc).
Keywords
Goal, goals, Goal management, text field, textarea field, Security Error, create goal, Error Message , KBA , LOD-SF-GM-ADM , Admin Tools, Settings, Permissions , How To