IBM Support

JR55718: Input validation error on 'Add' from Test and Compile in Visual Modeler

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When integrating WebSphere Commerce with Configurator and Visual
    Modeler, you might encounter an input validation error when
    launching the "Test and Compile" window from Visual Modeler and
    clicking the "Add" button.
    
    Example
    16:40:09,796:WARN :WebContainer : 3: SECURITY-FAILURE - Input
    exceeds maximum allowed length of 500 by 245 characters:
    context=HTTP parameter value (Name:configurationXML),
    type=_default_, input=<?xml version='1.0'
    encoding='UTF8'?>__<ConfiguratorBOM ... ...
    

Local fix

  • Add the following code to the
    Sterling_eardir/sic.war/WEB-INF/lib/SterlingCommerceConfigurator
    .jar/sic_InputType_ValidationRules_extn.properties file:
    
    HTTPParameterValue.SCVALIDATOR.configurationXML.W_LIST_REG_EXP-1
    =^[a-zA-Z0-9_<>?\/=\'\\-\\.:#;\\x14\\x11\\x12\\x13 \\n\\r]*$
    HTTPParameterValue.SCVALIDATOR.configurationXML.MAX_LENGTH=10000
    

Problem summary

  • USERS AFFECTED:
    WebSphere Commerce business users on V7 leveraging the Sterling
    Configurator and Visual Modeler integration.
    
    PROBLEM ABSTRACT:
    Input validation error on 'Add' from Test and Compile in Visual
    Modeler
    
    BUSINESS IMPACT:
    Business users are unable to use the "Add" button in the Test
    and Compile window from Visual Modeler.
    
    RECOMMENDATION:
    

Problem conclusion

  • This fix updates the configurationXML validation settings in the
     sic_InputType_ValidationRules_extn.properties file.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR55718

  • Reported component name

    WC BUS EDITION

  • Reported component ID

    5724I3800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-04-08

  • Closed date

    2016-05-09

  • Last modified date

    2016-05-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WC BUS EDITION

  • Fixed component ID

    5724I3800

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSYL","label":"WebSphere Commerce Enterprise"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB31","label":"WCE Watson Marketing and Commerce"}}]

Document Information

Modified date:
11 December 2021