Skip to main content

This content has been archived and is no longer being updated. Links may not function; however, this content may be relevant to outdated versions of the product.

Support Article

URL's are not encrypted

SA-38096

Summary



The user reported that even after setting the following DSS, the URL's are neither encrypted nor obfuscated.
  1. prconfig/initialization/urlencryption/default - true
  2. prconfig/initialization/submitobfuscatedurl/default - optional


And moreover, after the above changes the portals except developement portal seems to not work.


Error Messages



'length' is null or not an object
pega_ui_harness_deferred_1232858027!!.js


Steps to Reproduce



Change the following DSS file
  1. prconfig/initialization/urlencryption/default.
  2. prconfig/initialization/submitobfuscatedurl/default.
  3. Then open the portal.
  4. Click on any module.


Root Cause



The root cause of this problem is defect/misconfiguration in the PRPC operating environment. URLs generated by custom Javascript were not passed through a SafeURL encoder and thus encountered errors after being encrypted.

Resolution



Perform the following local-change:

When generating URLs in custom javascript, rather than using this implementation:
var oTempURL = pxReqURI+"?pyActivity=ORG-FW-Application-Work.Document&DocName="+docname;

use this implementation:

var oTempURL = new SafeURL(ORG-FW-Application-Work.Document)

oTempURL.put("DocName",docname);

The safeURL function is necessary to create URLs in a way that the URL obfuscation algorithms can parse.

Published May 17, 2017 - Updated October 8, 2020

Was this useful?

0% found this useful

Have a question? Get answers now.

Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

We'd prefer it if you saw us at our best.

Pega Community has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice