3776342 - Brand email layout triggers security scan errors in online offers - Recruiting Management

When sending online offers or emails as pdf, if brand email layouts are selected the security scan fails the html layout. 

Error message: This content was rejected by the Security Scan of User Inputs feature because it might contain malicious content. Please review your content for security risks, such as scripting, and try again.

SAP SuccessFactors Recruiting Management

1. In Recruiting, compose an online offer or choose to send an email as PDF to a candidate.
2. Select a brand email layout from CSB.
3. Observe a "Security Scan error" is returned.

The platform security scan rejects HTML injected by the brand email layout because it includes tags or attributes not on the allow list. But this is not an actual security issue.

This is a known product limitation and has been confirmed as an enhancement request and will enhanced in a future release.

Workaround: send offers/emails without selecting a brand email layout.

Recruiting management, security scan, error, offer letter, online offer, email as pdf, brand email layout, csb layout, html, allow list, recruiting emails, email branding, career site builder, input contains tags not defined, enhancement, RCM-156908 , KBA , LOD-SF-RCM-CAO , Candidate Offers, Offer Letters , Product Enhancement