Question
Accenture
AU
Last activity: 2 Nov 2022 2:13 EDT
Where to find pzGetDataPageJSON ?
As part of Pega Security Advisory (https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix), we need to check pyPublicDataPageWhiteList by running pzGetDataPageJSON activity. However, we could not find that rule.
Accepted Solution
Updated: 31 Oct 2022 1:37 EDT
Pegasystems Inc.
IN
@alfin.putra Hi Alfin,
Navigate to Operator Icon and click on it select the preferences from it and enable diagnostic features that is when you will be able to search pz rules.
Once enabled try searching the rule you will be able to find it. PFA screenshots for reference
Please do let us know if it resolves your issue
Accenture
AU
@SrinidhiM that works thanks! just wondering why is the option is disable by default? will enabling it affect anything?
Pegasystems Inc.
IN
@alfin.putra No it will not affect anything, this is by default disabled to not give direct access to the pega internal activities. This will not affect anything in the system.
Accenture
AU
@SrinidhiM thanks for the reply.
I tried to run this activity with some data pages listed in pyPublicDataPageWhiteList. In here (Pega Security Advisory D22 / E22 / F22 Vulnerabilities – Hotfix Matrix. | Support Center) it's mentioned that the activity pzGetDataPageJSON internally checks the allow-listed Data Pages that are specified in the HTML rule pyPublicDataPageWhiteList.
However, it returned nothing nothing when I run it. Do you know if this is expected and is there any other way to check the allow-listed Data Pages that are specified in the HTML rule pyPublicDataPageWhiteList?
Pegasystems Inc.
IN
@alfin.putra HI Alfin,
If you check the article it says two scenarios
"Use of the HTML rule pyPublicDataPageWhiteList depends on two conditional scenarios.
Scenario 1: If the application does not use pega.api.ui.actions.getDataPage() for any business use case
Scenario 2: If the application uses either the activity pzGetDataPageJSON or the JavaScript API pega.api.ui.actions.getDataPage() for any business use case "
Does your scenario fall under any of the two above? Do you use the JS AI or the activity given in here?
Regards,
Srinidhi
Accenture
AU
@SrinidhiM Yes, we have scenario 2 where some of our text files calls data pages using that function pega.api.ui.actions.getDataPage()