Question

De Volksbank NV
NL
Last activity: 2 Jun 2023 9:10 EDT
When Rule pyBlockUnregisteredRequests
As part of a recent security advisory we were told that after either Pega 8.8.2 or Pega 8.9 to ensure that the When Rule pyBlockUnregisteredRequests should be set to always true in our applications. This turns on protections that ensure unregistered User Interface components cannot make a Section or Harness Refresh request from the browser. However, we know there are compatibility issues with some Pega applications such as Customer Services (CSFS in our case). Does anyone know the scope of 8.8.2 or Infinity 23 and can tell us if the base platform and Pega applications will align so that we can enable the protection?