Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Suman Gumudavelly (SUMAN_GUMUDAVELLY)
Ford Motor Company
Pega Operations, CoE and Administration
Ford Motor Company
US
SUMAN_GUMUDAVELLY Member since 2011 17 posts
Ford Motor Company
Posted: May 13, 2020
Last activity: May 15, 2020
Posted: 13 May 2020 15:52 EDT
Last activity: 15 May 2020 11:20 EDT
Closed

Validate Invalid Characters - Dash ( - )

I have requirement in my Organization SSO Login where, we have Corporate ID's which contain (-) in it. By tracing I found the Edit Validate: pyValidateInvalidChars rule is stopping me create Operator ID with (-) in it. 

Being this is a py Rule, I can override in my Org Ruleset, which is similar to what is suggested in below Post:

https://collaborate.pega.com/question/creating-operator-id-hypen 

However, I wanted to understand, are there any specific Security Vulnerabilities associated with this approach. 

Thanks!

 

***Edited by Moderator Marissa to update Type from General to Product***

To see attachments, please log in.
Pega Platform 8.5
Security
Cross-Industry
Senior System Architect
System/Cloud Ops Administrator

Posted: 5 years ago
Posted: 15 May 2020 11:20 EDT
Brad Tainter (Br@dTainter_GCS)
PEGA
Fellow, Technical Support, Platform Service
Pegasystems Inc.
US

Hi GUMUDAVELLY,

I am not aware of any security vulnerabilities with the approach, however it is not recommended as for the reasons in the article you cited. Here are a couple more articles that cite the same thing:

https://community.pega.com/support/support-articles/pega-does-not-accept-dashes-operator-id-field

https://community.pega.com/support/support-articles/special-characters-operator-id

 

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice