Apostrophes In User Last Name Cause Unhandled Exception In NDP Activity Templates (Doc ID 1903914.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Agile New Product Development and Introduction for Process - Version 6.1.1.3 and later
Information in this document applies to any platform.

Symptoms

On Oracle Agile PLM for Process 6.1.1.3, New Product Development:
When attempting to remove a signature request (or owner assignment) from an NPD activity template when a user assigned to that request has an apostrophe in his / her name, an unhandled error is displayed in the application.
The following error is written to the NPD-Prodika server event log:

Error:
====
The description for Event ID 0 from source NPD-Prodika cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

ErrorType: First| ErrorCount: 0| App: NPD|

Exception: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (ctl01$ActivityTemplateEditor$ctlSummary$rptSteps$ctl02$ctlActivityTemplateSteps$ctlCollapsibleContentContainer$ctl00$ctlSignatureRequestMatrix$grdMatrix$ctl02$bhfMemberNames="... Annalee O'Rourke").
  at System.Web.HttpRequest.ValidateString(String s, String valueName, String collectionName)
  at System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, String collectionName)
  at System.Web.HttpRequest.get_Form()
  at System.Web.HttpRequest.get_HasForm()
  at System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull)
  at System.Web.UI.Page.DeterminePostBackMode()
  at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
  at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
  at System.Web.UI.Page.ProcessRequest()
  at System.Web.UI.Page.ProcessRequest(HttpContext context)
  at ASP.mainpage_npd_aspx.ProcessRequest(HttpContext context)
  at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
  at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

the message resource is present but the message is not found in the string/message table

The individual user with the apostrophe in his/her last name can be removed first and then the assignment removed. However, the last name of the user appears in the search dialog window with the apostrophe unescaped (apostrophe is displayed as ').



The issue can be reproduced at will with the following steps:
==========================================
1. Locate an NPD activity template that has a signature request or owner assignment with a user that has an apostrophe in his/her last name (or add such a user).
2. Save the entry if the user was added.
3. Put the activity template into edit mode
3. Try to remove the signature request or owner assignment by clicking the pencil button on the left and then select the delete button (red x) on the far right
=> unhandled exception appears


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms