SAP Knowledge Base Article - Public

3589929 - Security Error triggered when there are special symbols input in goal text or textarea fields

Symptom

Security Error is sometimes triggered when special symbols are used in goal text or textarea fields:

"The given value Security Scan has failed for value 'Goal text' being supplied for field type 'String'. Input that is associated with malicious activity is not permitted based on the current security configurations found in Admin Tools -> Application Security Feature Settings."

Environment

SAP SuccessFactors Performance & Goals

Reproducing the Issue

  1. Go to Admin Center - Application Security Feature Settings.
  2. Turn on the Security Scan of User Inputs: With this feature enabled, user inputs are scanned for security and rejected if any malicious content is identified. 
  3. Go to Goals menu and create a new goal with any text or text-area field  containing special symbols such as "=", ">", "<".
  4. Observe the security error preventing the saving of the goal

Resolution

This is current expected behaviour, the security setting enabled is scanning the input text and some combinations of words and symbols could be perceived as potentially malicious code. 

Please avoid using special symbols while creating goals.

Workarounds:

  • replace special symbols symbols with words;
  • separate special symbols with punctuation marks (space, dot, colon etc).

Keywords

Goal, goals, Goal management, text field, textarea field, Security Error, create goal, Error Message , KBA , LOD-SF-GM-ADM , Admin Tools, Settings, Permissions , How To

Product

SAP SuccessFactors Performance & Goals all versions