Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Apoorva Matolli (ApoorvaMatolli)
Marsh

Marsh
US
ApoorvaMatolli Member since 2014 14 posts
Marsh
Posted: Jun 23, 2015
Last activity: Jul 18, 2017
Posted: 23 Jun 2015 10:59 EDT
Last activity: 18 Jul 2017 10:39 EDT
Closed
Solved

URLAccessModeWarn:URLAccessPermitted URLAccessDetail CSRFAttack Missing harness ID

We are seeing the following error in our pega 7 logs intermittently-

URLAccessModeWarn:URLAccessPermitted URLAccessDetail CSRFAttack Missing harness ID: From <class>.....

What could be the cause of it?

***Updated by moderator: Lochan to close post***
This post has been archived for educational purposes. Contents and links will no longer be updated. If you have the same/similar question, please write a new post.

To see attachments, please log in.
Security
System Administration
Updates

Accepted Solution

Posted: 9 years ago
Posted: 29 Jun 2015 6:25 EDT
Santanu Bhattacherjee (Santanu) Senior Manager, Cloud Engineering, Management Plane Services
Pegasystems Inc.
IN

Hi

This is a known issue and fixed in 7.1.8

In your current release if you want to disable the protection and stop these warnings ( though not recommended) , add the following to prconfig.xml

<env name="security/urlaccessmode" value="allow" />

This should be re enabled once upgraded to 7.1.8

To see attachments, please log in.
Posted: 9 years ago
Posted: 3 Dec 2015 13:23 EST
Randy Bundalian (bundr)
PEGA
Senior Technical Architect
Pegasystems Inc.
US

Client on 7.1.8 is still seeing these warnings.

URLAccessModeWarn:URLAccessPermitted URLAccessDetail CSRFAttack Invalid harness ID HID0C0CCEFACADCD66CA5C7CAC986B15A0D

URLAccessModeWarn:URLAccessPermitted URLAccessDetail ActionTampered Unknown reason

URLAccessModeWarn:URLAccessPermitted URLAccessDetail ActionTampered Actual Fixed Param-Value : key=<CLIENT>FW-WORK NB-1257   Expected Param-Value : key="<CLIENT>FW-WORK NB-1209"

Please confirm this been fixed in 7.1.8.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice