WebDynpro exception: The URL possibly contains malicious Script

[Lukas_Weigelt]

Hi guys,

today I tried to look at the webdynpro-built-in portion of a comp-conf and this happened:

I then tried to look at a couple of (seven or so) other comp confs to rule out it's an issue of one component, but the same happens, it seems to happen for every component configuration there is, including standard ones.

SapXSearch quite unusually is not very fruitful when search for this problem. All I found are these notes and scn-posts:

1628411

http://scn.sap.com/thread/95468

http://scn.sap.com/thread/501450

But none of them help the least bit :-/. This really makes me feel uneasy, can anyone help me? For better analysis possibilities I'm appending the callstack and part of the dump.

Callstack:

Dump:

Any help is appreciated.

Cheers, Lukas

[Former Member · Accepted solution]

You have run into a program error in the cross-site scripting (XSS) detection/prevention mechanism in AS ABAP. See the attached SAP note.

Note 1738095 - Dump UNCAUGHT_EXCEPTION in Web Dynpro Configurator

[Lukas_Weigelt · Accepted solution]

Thanks a lot Samuli, this did the trick. It's a shame that none of the search terms within this note match with the actual error messages or development environment; this makes finding that note uncomfortable 😕

Cheers, Lukas