Question
Altimetrik
IN
Last activity: 9 Feb 2024 7:09 EST
SECU0001 Alert : Unexpected properties recieved in HTTP Request
Hi All,
On Finish Assignment of a submit button click action, Pega Error page was displayed.
Upon Tracing I found the alert SECU0001 in my tracer stating the below
Referred the below article stating that the issue is resolved from 8.2v but Im still facing it in 8.4
https://community.pega.com/support/support-articles/secu0001-alert-continuously-appears-alert-logs
***Edited by Moderator Marije to change type from Pega Academy to Product***
Accepted Solution
Updated: 9 Feb 2024 7:09 EST
Pegasystems Inc.
GB
@Lakshmimadhurya Tipireddy @josenavas
The security SECU0001 alert is generated during the processing of HTTP requests. Properties that are not in the list of expected properties are ignored by the system during the processing of HTTP requests. After all HTTP parameters have been processed, the system generates this security alert, and lists all unexpected properties.
Kindly follow the below articles for more information/reason of this alert.
https://community.pega.com/support/support-articles/secu0001-alert-continuously-appears-alert-logs https://support.pega.com/question/how-disable-secu0001-alert-pega-718
We have had few similar cases. In general currently we suggest clients to suppress the SECU0001 alerts taking into account the feedback that we have from the product team:
@Lakshmimadhurya Tipireddy @josenavas
The security SECU0001 alert is generated during the processing of HTTP requests. Properties that are not in the list of expected properties are ignored by the system during the processing of HTTP requests. After all HTTP parameters have been processed, the system generates this security alert, and lists all unexpected properties.
Kindly follow the below articles for more information/reason of this alert.
https://community.pega.com/support/support-articles/secu0001-alert-continuously-appears-alert-logs https://support.pega.com/question/how-disable-secu0001-alert-pega-718
We have had few similar cases. In general currently we suggest clients to suppress the SECU0001 alerts taking into account the feedback that we have from the product team:
- The SECU0001 alerts is an old feature where it logs an alert to warn that some extra properties are being added in the request. It does not have any significance with respect to security as Pega does not honor any extra properties sent through any request. There are areas of the platform that may trigger this alert along with your own custom code.
In order to suppress the alert you need to specify the setting (DSS):
- purpose: prconfig/security/UnexpectedInputPropertyAlert/default
- value: false
- set owning ruleset as: Pega-Engine.
The main documentation can be found here:
Support Document
Understanding HTTP status codes for troubleshooting common issues
Alerts Documentation
SECU0001 alert: Unexpected properties received in HTTP request
If you still need help, please log a support incident via the MSP and please provide the INC references in a reply here so that we can help track it.
SoftServe
US
@PoojaPalla I also noticed the issue in Pega 8.8.1: (Pega Cloud)
Unexpected properties received in HTTP request : Rule-Obj-Activity: ReloadSection @The following unexpected properties were received in an HTTP request for Thread PS1__TABTHREAD2: UserPage.Proficiency, UserPage.RemoteAccessPlatformRef, UserPage.pyAssignedOperator, UserPage.pyNote
In my case, I'm refreshing a wrapper section and I specify a data transform which sets the initial values for the "UserPage" mentioned in the error above.
Thanks,
-Jose
Highmark
US
@josenavasHi, We are also having same issue in our application. Were you able to resolve this issue? If yes, can you please post solution that you tried.
Accepted Solution
Updated: 9 Feb 2024 7:09 EST
Pegasystems Inc.
GB
@Lakshmimadhurya Tipireddy @josenavas
The security SECU0001 alert is generated during the processing of HTTP requests. Properties that are not in the list of expected properties are ignored by the system during the processing of HTTP requests. After all HTTP parameters have been processed, the system generates this security alert, and lists all unexpected properties.
Kindly follow the below articles for more information/reason of this alert.
https://community.pega.com/support/support-articles/secu0001-alert-continuously-appears-alert-logs https://support.pega.com/question/how-disable-secu0001-alert-pega-718
We have had few similar cases. In general currently we suggest clients to suppress the SECU0001 alerts taking into account the feedback that we have from the product team:
@Lakshmimadhurya Tipireddy @josenavas
The security SECU0001 alert is generated during the processing of HTTP requests. Properties that are not in the list of expected properties are ignored by the system during the processing of HTTP requests. After all HTTP parameters have been processed, the system generates this security alert, and lists all unexpected properties.
Kindly follow the below articles for more information/reason of this alert.
https://community.pega.com/support/support-articles/secu0001-alert-continuously-appears-alert-logs https://support.pega.com/question/how-disable-secu0001-alert-pega-718
We have had few similar cases. In general currently we suggest clients to suppress the SECU0001 alerts taking into account the feedback that we have from the product team:
- The SECU0001 alerts is an old feature where it logs an alert to warn that some extra properties are being added in the request. It does not have any significance with respect to security as Pega does not honor any extra properties sent through any request. There are areas of the platform that may trigger this alert along with your own custom code.
In order to suppress the alert you need to specify the setting (DSS):
- purpose: prconfig/security/UnexpectedInputPropertyAlert/default
- value: false
- set owning ruleset as: Pega-Engine.
The main documentation can be found here:
Support Document
Understanding HTTP status codes for troubleshooting common issues
Alerts Documentation
SECU0001 alert: Unexpected properties received in HTTP request
If you still need help, please log a support incident via the MSP and please provide the INC references in a reply here so that we can help track it.