IBM Support

IV87866: TRIRIGA IMPLEMENTS AN HTML5 CROSS-ORIGIN RESOURCE SHARING POLICY FOR THIS REQUEST WHICH ALLOWS ACCESS FROM ANY DOMAIN

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as fixed if next.

Error description

  • An HTML5 Cross-Origin Resource Sharing (CORS) policy controls
    whether and how content running on other domains can perform
    two-way interaction with the domain that publishes the policy.
    The policy is fine-grained and can apply access controls
    per-request based on the URL and other features of the request.
    
    If another domain is allowed by the policy, then that domain
    can potentially attack users of the application. If a user is
    logged in to the application, and visits a domain allowed by
    the policy, then any malicious content running on that domain
    can potentially retrieve content from the application, and
    sometimes carry out actions within the security context of the
    logged in user.
    

Local fix

  • No.
    

Problem summary

  • Cross-Origin Resource Sharing (CORS) policy controls whether
    and how content running on other domains can perform two-way
    interaction with the domain that publishes the policy.  This is
    not needed by the IBM TRIRIGA Platform.
    

Problem conclusion

  • The CORS policy has been removed.  This is targeted to the
    2H2016 release, as well as the 3.5.1.2 fix pack.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV87866

  • Reported component name

    TRI APPLCATION

  • Reported component ID

    5725F26AB

  • Reported release

    350

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-08-11

  • Closed date

    2016-08-11

  • Last modified date

    2016-08-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • 999
    

Fix information

Applicable component levels

  • R351 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSHEB3","label":"IBM TRIRIGA Application Platform"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"350","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
30 March 2022