SECU0019 Alert for activity call in javascript text file

General
1

Hi,

We have a section with a Run Script action on Submit button. The JavaScript function calls an activity using SafeURL, and the activity name is passed dynamically as a function parameter.

We are getting SECU0019 - Unauthorized request detected: Unregistered request encountered with params pyActivity when accessing the functionality from the end-user portal, but the issue does not occur when launched from Dev Studio.

We have already:

  • Enabled “Register OOTB actions used in script for URL tamper proofing” in the run script action in the section.
  • Tried registering the activity using pega_rules_utilities.pzRegisterActivity(tools,“ActivityName”) in the JS code.
  • Tried encrypting the URL/action string using pzEncryptURLActionString()

However, the SECU0019 alert still occurs for the activity call made through SafeURL.

What is the recommended way to register or encrypt a dynamically invoked activity in this scenario? Has anyone handled a similar BAC/SECU0019 issue with SafeURL and dynamic activity names?

Thanks in advance.

2

Hello Nikitha,

You have already done the steps that I would suggest.

Given that, I think you need to open an INC with GCS and someone from the UI team will work with you on this.

Thank you.

  • Michael