Clarity

Anybody else getting errors when saving processes in 13.3 (in Firefox 48) particularly when saving process steps the first time

Nothing in app-ca.log for half an hour.

app-security-violations.log has

ERROR 2016-09-20 09:37:08,376 [http-bio-80-exec-69] violation.xss (clarity:kinnunenad:5145018__E48AB039-EE71-4663-896A-9B5E747E1384:bpm.stepCustomActionInError) Found JavaScript : ((\\<|%3C|%3c)(\w)) in URL : action=bpm.stepCustomActionInError&bpm.returnModuleAction=bpm.processDefinitionsReturn&action_code=gel+step&uitk.navigation.last.workspace.action=bpm.actionBuilderStart&return_action=bpm.stepProperties&superSecretTokenKey=superSecretTokenValue&object_type=admin&process_version_id=5003002&custom_action_script_text=%3Cgel%3Ascript+xmlns%3Acore%3D%22jelly%3Acore%22+xmlns%3Adefine%3D%22jelly%3Adefine%22%0D%0A%0D%0A++++xmlns%3Agel%3D%22jelly%3Acom.niku.union.gel.GELTagLibrary%22%0D%0A%0D%0A++++xmlns%3Asql%3D%22jelly%3Asql%22+xmlns%3Autil%3D%22jelly%3Autil%22+xmlns%3Ax%3D%22jelly%3Axml%22+xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FXMLSchema-%0D%0A%0D%0Ainstance%22%3E%0D%0A%0D%0A+%0D%0A%0D%0A++++%3Cgel%3AsetDataSource+dbId%3D%22Niku%22%2F%3E%0D%0A%0D%0A+%0D%0A+++++++++++%0D%0A%0D%0A%3C%2Fgel%3Ascript%3E&action_name=gel+step&ui.page.space=bpm.processDefinitions&step_id=5005006&ui.page.template=union.adminPage&uitk.navigation.parent.location=Workspace&save_and_stay=true&completion_option=1

and app-access-2016-09-20.log

127.0.0.1|[20/Sep/2016:09:37:08 +0300]|POST /niku/nu?uitk.vxml=1&action=bpm.stepCustomActionInError&bpm.returnModuleAction=bpm.processDefinitionsReturn&action_code=gel%20step&uitk.navigation.last.workspace.action=bpm.actionBuilderStart&return_action=bpm.stepProperties&superSecretTokenKey=superSecretTokenValue&object_type=admin&process_version_id=5003002&custom_action_script_text=%3Cgel:script%20xmlns:core=%22jelly:core%22%20xmlns:define=%22jelly:define%22%0D%0A%0D%0A%20%20%20%20xmlns:gel=%22jelly:com.niku.union.gel.GELTagLibrary%22%0D%0A%0D%0A%20%20%20%20xmlns:sql=%22jelly:sql%22%20xmlns:util=%22jelly:util%22%20xmlns:x=%22jelly:xml%22%20xmlns:xsi=%22http://www.w3.org/2001/XMLSchema-%0D%0A%0D%0Ainstance%22%3E%0D%0A%0D%0A%20%0D%0A%0D%0A%20%20%20%20%3Cgel:setDataSource%20dbId=%22Niku%22/%3E%0D%0A%0D%0A%20%0D%0A%20%20%20%20%20%20%20%20%20%20%20%0D%0A%0D%0A%3C/gel:script%3E&action_name=gel%20step&ui.page.space=bpm.processDefinitions&ui.page.template=union.adminPage&step_id=5005006&uitk.navigation.parent.location=Workspace&save_and_stay=true&completion_option=1 HTTP/1.1|200|1786|9|5145018__E48AB039-EE71-4663-896A-9B5E747E1384
127.0.0.1|[20/Sep/2016:09:37:59 +0300]|POST /niku/nu?uitk.vxml=1&action=bpm.stepCustomAction&process_version_id=5003002&step_id=5005006&object_type=admin&ui.page.space=bpm.processDefinitions&ui.page.template=union.adminPage&return_action=bpm.stepProperties&bpm.returnModuleAction=bpm.processDefinitionsReturn HTTP/1.1|200|3375|30|5145018__E48AB039-EE71-4663-896A-9B5E747E1384
127.0.0.1|[20/Sep/2016:09:38:02 +0300]|POST /niku/nu?uitk.vxml=1&action=bpm.stepProperties&step_id=5005006&process_version_id=5003002&object_type=admin&ui.page.space=bpm.processDefinitions&ui.page.template=union.adminPage&bpm.returnModuleAction=bpm.processDefinitionsReturn HTTP/1.1|200|5183|44|5145018__E48AB039-EE71-4663-896A-9B5E747E1384
127.0.0.1|[20/Sep/2016:09:38:07 +0300]|POST /niku/nu?uitk.vxml=1&action=bpm.stepList&process_version_id=5003002&step_id=5005006&object_type=admin&ui.page.space=bpm.processDefinitions&ui.page.template=union.adminPage&bpm.returnModuleAction=bpm.processDefinitionsReturn HTTP/1.1|200|3084|25|5145018__E48AB039-EE71-4663-896A-9B5E747E1384

This happens at least on two different systems and is repeatable at will.

Luckily the error is in error: The step is created and saved.

Hello @urmas,

This would be the same as per the other issue with 13.3 and notifications with Firefox. I am pasting here the solution for reference for other users as well:

There are known issues using Firefox 41 or later due to an internal code change in Mozilla browser. You might see many other similar issues as this is not exclusive to the page that you are mentioning.

This has been documented in the following KB Article:

http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec1040434.aspx

This has been fixed in 14.3 patch 1 and later releases.

I would recommend that you use a different supported browser and that you plan for a PPM upgrade to the latest available release; this is because FF 40 or earlier are not supported by Mozilla anymore and do not include the latest security patches. As a reminder, Clarity PPM 13.3 will be out of support on October 30 as well.

Thanks,

Marc

Sounds like the same problem as in

Error deleting 13.3 notifications in Firefox 

Thanks   Marc_Buigues 

No such problem with Chrome.