Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
Problem
Custom report using Reporting Template Designer (RTD) does not display the HTML tags.
Error Message
N/A
Cause
A Cross-Site Scripting (XSS) fix made in Aptare 10.6 P9.
Solution
1) Add the flag portal.allowHtmlTagsInRTD=true in the portal.properties file.
2) Stop and start Tomcat Portal service.
Linux:
1) Make a backup and edit:
/opt/aptare/portalconf/portal.properties
2) Add the flag and save the file:
portal.allowHtmlTagsInRTD=true
3) Restart APTARE Portal Tomcat service:
# /opt/aptare/bin/tomcat-portal stop
# /opt/aptare/bin/tomcat-portal status
# /opt/aptare/bin/tomcat-portal start
Windows:
1) Make a backup and edit:
C:\opt\aptare\portalconf\portal.properties
2) Add the flag and save the file:
portal.allowHtmlTagsInRTD=true
3) Restart APTARE Portal Tomcat service from Windows Services.
Note: If this flag is set, customer can potentially be exposed to XSS vulnerability through custom RTD.
There are currently no plans to address this issue by way of a patch or hotfix in the current or previous versions of the software at the present time. While this issue may be resolved in a future major revision of the software at a later time, it is not currently scheduled for any release. If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Veritas Sales representative or the Veritas Sales group to discuss these concerns.