Notifications

104 views

Description

When an URL contains special characters like "<" and ">" (usually occurs if some date or date/time fields are used in the filter to build a list of record) and the "Open record" button from the form popup is used it redirects to "not_allowed.do" page which displays the message:
Security constraints prevent access to requested page

Steps to Reproduce

1) Create a report with the following:
- Table: incident
- Type: list
- Filter: Created | after | 2017-01-01 11:00:00 (make sure to input some time in the value as well like 11:00:00)


2) Save the report

3) Go to any homepages and add in the report created above

4) On this report widget added to a homepage click on the preview "i" icon on any records that are listed.

5) A popup preview form is displayed. Click on the "Open Record" button.

6) See that the link is redirecting to "not_allowed.do" and that page is displaying the message:
Security constraints prevent access to requested page

Workaround

This behavior only affects the "Open Record" button on the form popup preview.

So instead click on the direct link of the record or open the record link in a new tab.


Related Problem: PRB1327165

Seen In

SR - IRM - Audit Management - New York 2019 Q3
SR - IRM - GRC Profiles - Madrid 2019 Q2
SR - IRM - GRC Workbench - New York 2019 Q3
SR - IRM - PA Premium Integration - New York 2019 Q3
SR - IRM - Policy and Compliance - Madrid 2019 Q2
SR - IRM - Risk Management - New York 2019 Q3
SR - Security - Integration Framework - Madrid 2019 Q2
SR - Security - Support Common - Madrid 2019 Q2
SR - Security - Support Orchestration - Madrid 2019 Q2
SR - SIR - Store SecOps Setup Assistant - Madrid 2019 Q2
SR - VR - Rapid7 - London 2019 Q2 v.6.2.1
SR - VR - Vulnerability Response - New York 2019 Q3
SR - VR - Vulnerability Response PA Content - Madrid 2019 Q2

Fixed In

New York

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2019-08-22 06:46:34
Published:2019-06-21