Support Article
Edit decision tables in Excel fails with "nosniff" option
SA-40379
Summary
When Excel is launched from decision tables it fails to display content.
This occurs when the following line is present in the configuration the of iPlanet middleware server:
"Output fn="set-variable" insert-srvhdrs="X-Content-Type-Options: nosniff"
When this line is commented out, editing decision tables in Excel works.
Middleware in use is detecting some Pega content as a security risk, and blocking it.
Error Messages
Not Applicable
Steps to Reproduce
Add below line in Obj.Conf for IPlanet Server:
"Output fn="set-variable" insert-srvhdrs="X-Content-Type-Options: nosniff"
Root Cause
Architecture of Excel integration with decision tables in PRPC 6.3 SP1 requires downloading Excel macrocode encoded as base64 string.
The nosniff option forces server to flag this as security risk.
Resolution
Use one of the following approaches to resolve the issue:
Remove the nosniff option.
(Or)
Upgrade to the latest Pega release that implements different Excel integration approach that does not involve downloading macrocode.
Published September 25, 2017 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.