Focal Point Banner


As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.

Join the TIBCO Community
TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.

  • From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
  • Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
  • Request access to the private WebFOCUS User Group (login required) to network with fellow members.

Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.


Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [SOLVED] Cross-site scripting error

Read-Only Read-Only Topic
Go
Search
Notify
Tools
[SOLVED] Cross-site scripting error
 Login/Join
 
Member
posted
Hello everyone,

I'm fairly new to WF. We're running version 7.1.3. with IE 10 on Windows 7 machines. I keep getting pesky cross-site scripting errors when I run the code below (eventually I will have it prompt for the transaction date). I've already enabled XSS in the custom IE settings to no avail. Any help appreciated! The exact IE error is: "Internet Explorer has modified this page to help prevent cross site scripting." I get a nice hash tag in the upper left corner and a white screen.

Best,
Doug
Bard College
Data Analyst
--
-* File doug_wambach_transbydate1.fex
ENGINE SQLORA SET DEFAULT_CONNECTION PROD
SQL SQLORA PREPARE SQLOUT FOR
select distinct FGBTRNH_DOC_CODE,
NVL(fgbtrnh_orgn_code, 'N/A') "OrgnCode",
substr(nvl(f_orgn_title(FGBTRNH_COAS_CODE, FGBTRNH_ORGN_CODE, SYSDATE),'None'),1,35) "OrgnTitle",
NVL(fgbtrnh_acct_code, 'N/A') "AcctCode",
substr(nvl(f_acct_title(FGBTRNH_COAS_CODE, FGBTRNH_ACCT_CODE, SYSDATE),'None'),1,35) "AcctTitle",
NVL(fgbtrnh_prog_code, 'N/A') "ProgCode",
substr(nvl(f_prog_title(FGBTRNH_COAS_CODE, FGBTRNH_PROG_CODE, SYSDATE),'None'),1,35) "ProgTitle",
NVL(fgbtrnh_actv_code, 'N/A') "ActvCode",
substr(nvl(f_actv_title(FGBTRNH_COAS_CODE, FGBTRNH_ACTV_CODE, SYSDATE),'None'),1,35) "ActvTitle",
NVL(fgbtrnh_locn_code, 'N/A') "LocnCode",
substr(nvl(f_locn_title(FGBTRNH_COAS_CODE, FGBTRNH_LOCN_CODE, SYSDATE),'None'),1,35) "LocnTitle",
NVL(fgbtrnh_prjd_code, 'N/A') "ProjectCode",
FGBTRNH_TRANS_DATE,
to_char(FGBTRNH_TRANS_AMT,'$999,999,999.00') FGBTRNH_TRANS_AMT,
FGBTRNH_TRANS_DESC,
FGBTRNH_BANK_CODE,
FGBTRNH_DR_CR_IND,
FGBTRNH_BUD_ID,
FGBTRNH_BUD_DISPN,
FGBTRNH_BUDGET_PERIOD,
to_char(decode(ftvacct_normal_bal,
'D', decode(fgbtrnh_dr_cr_ind,
'C', fgbtrnh_trans_amt,
'-', fgbtrnh_trans_amt,
0),
'C', decode(fgbtrnh_dr_cr_ind,
'C', fgbtrnh_trans_amt,
'+', fgbtrnh_trans_amt,
0)),'$999,999,999.00') as "Credits",
to_char(decode(ftvacct_normal_bal,
'D', decode(fgbtrnh_dr_cr_ind,
'D', fgbtrnh_trans_amt,
'+', fgbtrnh_trans_amt,
0),
'C', decode(fgbtrnh_dr_cr_ind,
'D', fgbtrnh_trans_amt,
'-', fgbtrnh_trans_amt,
0)),'$999,999,999.00') as "Debits"
from FIMSMGR.FTVCOAS,
FIMSMGR.FTVACCT,
FIMSMGR.FGBTRNH
where ( FTVCOAS_COAS_CODE = FGBTRNH_COAS_CODE
and FTVACCT_COAS_CODE = FGBTRNH_COAS_CODE
and FTVACCT_ACCT_CODE = FGBTRNH_ACCT_CODE )
and FGBTRNH_COAS_CODE = '0'
and FGBTRNH_FUND_CODE = '1000'
and FGBTRNH_ORGN_CODE IN ('7010','7020','7025','7050','7060','7065','7080','7401','7900','8135','8100','8110','8130','8201','8400','7420')
and FGBTRNH_ACCT_CODE >= '5630'
and FGBTRNH_ACCT_CODE <= '9999'
and FGBTRNH_TRANS_DATE >= sysdate-23;
END
TABLE FILE SQLOUT
PRINT
FGBTRNH_DOC_CODE
OrgnCode
OrgnTitle
AcctCode
AcctTitle
ProgCode
ProgTitle
ActvCode
ActvTitle
LocnCode
LocnTitle
ProjectCode
FGBTRNH_TRANS_DATE
FGBTRNH_TRANS_AMT
FGBTRNH_TRANS_DESC
FGBTRNH_BANK_CODE
FGBTRNH_DR_CR_IND
FGBTRNH_BUD_ID
FGBTRNH_BUD_DISPN
FGBTRNH_BUDGET_PERIOD
Credits
Debits
ON TABLE SET PAGE-NUM OFF
ON TABLE NOTOTAL
ON TABLE PCHOLD FORMAT HTML
END

This message has been edited. Last edited by: <Kathryn Henning>,


WebFOCUS 7.6
Windows, All Outputs
 
Posts: 5 | Registered: October 22, 2012Report This Post
Expert
posted Hide Post
The biggest problem you have is an old, unsupported, version of WebFOCUS and a new version of Internet Explorer.

According to the "Web Browser Support for WebFOCUS" document:
quote:

Microsoft Internet Explorer
- Version 8.0 (32-bit) is certified as of WebFOCUS Release 7.6.10.
- Versions 7.0 and 6.0 SP2, 6.0 SP3 are certified with WebFOCUS 7.6.x Releases.
I haven't found any support statements for v7.1.3.

This post suggests disabling the XSS filter: [SOLVED] IE 8 Scripting Problems.


Francis


Give me code, or give me retirement. In FOCUS since 1991

Production: WF 7.7.05M, Dev Studio, BID, MRE, WebSphere, DB2 / Test: WF 8.1.05M, App Studio, BI Portal, Report Caster, jQuery, HighCharts, Apache Tomcat, MS SQL Server
 
Posts: 10577 | Location: Toronto, Ontario, Canada | Registered: April 27, 2005Report This Post
Member
posted Hide Post
Thanks, Francis. Looks like an update is order. The XSS filter fix in IE didn't work.

Best,
Doug


WebFOCUS 7.6
Windows, All Outputs
 
Posts: 5 | Registered: October 22, 2012Report This Post
  Powered by Social Strata  

Read-Only Read-Only Topic

Focal Point    Focal Point Forums  Hop To Forum Categories  WebFOCUS/FOCUS Forum on Focal Point     [SOLVED] Cross-site scripting error

Copyright © 1996-2020 Information Builders