My Oracle Support Banner

Custom Properties Metadata is Not Validating User Input (Doc ID 2441451.1)

Last updated on FEBRUARY 25, 2019

Applies to:

Content and Experience Cloud Classic - Version 18.1.2 and later
Content and Experience Cloud Service - Version 14.1.0.0.0 and later
Information in this document applies to any platform.

Symptoms

While integrating CEC metadata with our application we are finding the following.

1. Custom properties field (Type: Text) is accepting invalid email format input through REST API and CEC UI.
2. Custom properties field (Type: Number) is accepting more than 15 digits through REST API and not in CEC UI.
3. Custom properties field (Type: Number) is accepting negative value though REST API & CEC UI.
4. Custom properties field accepts the metadata values even if we providing the wrong JSON format as input body text.
5. Custom properties field (Type: Text) is accepting the special characters (# * & | ? < > ^ ; { } ( ) ` = + \) through REST API and not in CEC UI.

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.