FDM Cross dimensional Scripting problem

Similar Questions

• DOM-Cross Site Scripting Vulnerability (http-client-side-xss) cased by a SharePoint 2010 file: MS. USER INTERFACE. Pub.Ribbon.js

  Hello

  We have implemented a portal that is connected to the Internet by using SharePoint 2010. We used a vulnerability scanner, called Rapid7 (https://www.rapid7.com).

  He noted that the portal is vulnerable to the based on DOM cross-site-scripting (XSS). The affected file is a SharePoint integrated in the Layouts folder: MS. USER INTERFACE. Pub.Ribbon.js

  The detailed message is as below:

  / _layouts/SP. USER INTERFACE. Pub.Ribbon.js line 94: exit dangerous customer call showUnapprovedXmlHttp.send () with the concatenation of 94:String argLine contaminated with the concatenation of 94:String valueLine controlled by the user with the concatenation of 94:String valueLine controlled by the user with the concatenation of 94:String valueLine of controlled use with the concatenation of 94:String controlled by the user valueLine with 94:Result valueLine controlled by the user of taint where are stored the calling function on ordered valueLine 94 : "document. URL.split... "... Split toLowerCase ' is controlled by the user

  References:

  Source	Reference
  CERT	CA-2000-02
  OWASP-2010	A2
  OWASP-2013	A3
  URL	http://en.Wikipedia.org/wiki/Cross_site_scripting
  URL	http://www.webappsec.org/projects/articles/071105.shtml

  Please advise on how to solve the problem of Security reported.

  Thank you

  Randy

  Hello Randy,

  Thanks for posting your question on the Forum of the Microsoft community.

  The question will be better suited to the audience of it professionals on the MSDN forums.

  I would recommend posting your query in the MSDN Forums.
   
  MSDN forum
  http://social.msdn.Microsoft.com/forums/SharePoint/en-us/home?Forum=sharepointgeneralprevious

  Thank you

• ToStaticHTML MS IE String Cross - Site Scripting Vulnerability associated with the processing of alarms

  Hello

  I was wondering if someone else has noted an increase in false positives on the 2 following competitions:

  -Microsoft Internet Explorer toStaticHTML String Cross - Site Scripting Vulnerability related to treatment

  -Microsoft Office Excel Ghost Record analysis of arbitrary Code execution vulnerability

  Obvisouly I see these events because the signature has been introduced recently.

  But I wonder if these alarms I get are authentic (and I have a big problem), or if the signature must be "set" by Cisco to be a little less sensitive?

  Anyone who has experienced something similar or can enlighten?

  Thank you

  SEB.

  Hello Seb,

  As a result of this thread, we have identified a false positive in signature 30419 and corrected the signature. The signature change is currently under review and is likely to do the update of signature which releases next week.

  Please let me know if I can help with anything whatsoever in addition under this thread. If your question has been answered, please mark the thread as such so that it is useful to other users. Also, feel free to note this thread to take account of your experience.

  Thank you

  Blayne Dreier

  Cisco TAC team climbing

  * Please see our Podcasts *.

  TAC security show: http://www.cisco.com/go/tacsecuritypodcast

  TAC IPS Media Series: https://supportforums.cisco.com/community/netpro/security/intrusion-prevention?view=tags&tags=tac_ips_media_series

• Question parliamentary formula - a member formula can be crossed dimensional

  How you would write something like this
  
  "XXXXXX" = account of range 40000 to 48999 and BU XXXXX-XXXXX-XXXXX-XXXXX
  
  
  Thank you

  Yes, the formula of Member can be three-dimensional cross.
  You can use the calculation functions and cross dimensional operator that you use in the Calc script.

• How to disable Adobe cross-site scripting.

  disable Adobe cross-site scripting. I have a vista running on a laptop

  http://forums.Adobe.com/index.jspa

  Try the Forums Adobe above, relating to your question.

  Or Vista programs Forum:

  It's updated operating system Vista, upgraded installation and activate Forum.

  http://social.answers.Microsoft.com/forums/en-us/vistaprograms/threads

  They will help you with your question in Forum Vista programs at the above address.

  See you soon.

  Mick Murphy - Microsoft partner

• Cross dimensional security

  Hello

  Any changes to cross dimensional 11.1.2.4 security?

  Customer wants to create a form for Admins to say which account through with entity can have a read or write access on top of security groups.

  Is it still possible?

  Tried to test something using filters, but then it should be to Essbase and planning (database) level. Am I wrong?

  Thank you

  Rafael

  There is no change yet in 11.1.2.4 to address cross-dimensional safety, when valid intersections do on site, then you will be able to limit data entry in forms of certain combinations of Member.

  There is no point really trying to do with filters Essbase if you access through a connection of planning, for now you can't work with the configuration options that are available in the planning.

  See you soon

  John

• Local variables with cross dimensional operator

  Hello
  
  I have a business rule that has the following calculation:
  
  VAR TOTPROD;
  TOTPROD = "Prod1" + "Prod2" + "Prod3."
  
  "MBR1" = "MBR2"->"Jan"-> TOTPROD / "MBR2"-> "YearTotal"->"TotalProducts";
  
  The statement above does not work for obvious reasons, that TOTPROD is not a member name.
  Is it possible to use a local variable in a cross dimensional operator statement?
  I want to use the local variable in order to avoid another hierarchy.
  
  I use Essbase / DGPS 11.1.2.2
  
  Help, please.
  Thank you.

  Hello

  As you say, I don't think that the approach you have will work.

  What is to be

  a. creating dummy product member in your plan and put your result on it (or use an existing Member of "dummy" product)

  b. re - write your code to handle you want to... do something like (assuming you add Prod1, 2 and 3):

  'MBR1' = ("MBR2"-> "Jan"-> "Prod1" + "MBR2"-> "Jan"-> "Prod2" + "MBR2"-> "Jan"-> "Prod3") / 'MBR2'-> 'YearTotal"->"TotalProducts ";

  Not sure if I'm missing something here, but or one of these suggestions do not help?

  JB

• proxy for a cross-dimensional operator

  All,
  
  Essbase doesn't like it:
  
  "Jan")
  
  ('Real'-> '2011 '->' 001 '->' abc') = ("Run1'-> '2011 '->' 000' - > & overhanging);
  
  )
  
  
  I have a variable substitution inside a cross-dimensional operator?

  The error you mention, that's what you see, if you put quotes around the subvar reference in the formula, but have you tried including the double quotes in the value of substitution variable when set you it in the dialog box "Variables of Substitution" in environmental assessments? In other words, so that what appears in the "Value" column looks like this...

  * "Your member name" * "

  .. .not this...

  Your member name

• Vulnerable Webhelp for XSS cross site scripting checking. Reason - document.location.href

  Online help, created by the team through a security vulnerability checking now. It was found that integration of webhelp with the application, document.location.href is a vulnerable point according to the XSS cross site scripting. Please your thoughts and all the methods that you have that can contain this situation. Its emergency, please help.

  You can update your copy with the help > update or web page: http://www.adobe.com/downloads/updates/

• Cross-dimensional forms

  11.1.1.3 planning app with 2 DB
  
  I have dimension members that the entity requiring a formula to draw cross-dimensional information:
  
  IF (@ISMBR ("C999"))
  IF (@ISMBR ("L99"))
  "C891'-> ' L90 '->' day 140."
  ENDIF
  ENDIF
  
  Where CXXV is undertaken, LXX is the business, DXXX is entity. When you try to put the formula in planning it will not be validated successfully. You can not have a planning formula which crosses the dimensions in one dimension other than accounts?
  
  I currently have the formulas of these members in Essbase in my 4 planning, Essbase 7.1.3 environment. I thought to go to 11.1.1.3 should I put formulas in planning - but no luck! Information/suggestions greatly appreciated.

  Put them in the planning as much as possible, only put them via EAS as a last resort.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• Cross-domain SWF problem

  Goal
  My main SWF (let's call it "TheShell.SWF") needs to load another SWF (call it a "TheContent.SWF") using loadMovie cross-domain.
  
  Problem
  I added the following line to the first picture of TheContent.SWF:
  System.security.allowDomain ("' http://www.example_shell_host.com ' ");
  
  However, when I opened "TheShell.SWF" on another area if fails to pull in the SWF file.
  
  I tried specifying the exact path ("' http://www.example_shell_host.com/creative ' "), but this does not work either. Nor is the use of the "*" credits.
  
  What I am doing wrong? Do I need to add any code to 'TheShell.SWF '?
  
  See you soon

  Just a quick update.

  After exhausting all other options, I moved the files of two new servers and they worked very well.

  Thank you

• cross dimensional operators on calc dynamic members

  The dimensions of my product and market are stored dimensions used in a calc script in AccountX calculation as follows:
  
  "AccountX" = "AccountB"->"product"-> "market"->"organization";
  
  I would like to change the dimensions of products and market to dynamic calc, but wonder if it would affect involuntary the calculation above, I would like to remain the same.
  
  In other words, can I use Crusaders dimensional operators on calc dynamic members without any problems?

  In principle you can cross-Sun dynamic members Calc, but this can have an impact on the performance of recovery especially if product / market are (and I assume they are) sparse dimensions.

  You must carefully test performance / calc order impact etc. in any case if you do what you suggest, which is much larger than any impact on this script formula especially calco - but I guess you know who.

• Concatenation FDM Import Table script

  Hi all

  First post here, so let me know if I'm making mistakes or leaving out critical information.  I'm trying to use FDM for importing a pipe delimited text file, use the mapping feature, and then export the new data to a .txt file.  The problem is that the entity on the finished side dimension must be a concatenation of the fields of the entity and the division.  What I tried to do is to write a script for the field of the entity on the tables import screen.

  Function Div_Ent_Comb (lngCatKey, dblPerKey, strLoc, strWorkTableName)

  '------------------------------------------------------------------

  "Integration oracle Hyperion FDM IMPORT script:

  '

  "Created by: cwinslow"

  "Creation date: 2014-10-09 15:34:39.

  '

  ' Object:

  '

  '------------------------------------------------------------------

  'Set variables '.

  Dim strCombination As String

  Dim strDivision As String

  Dim strEntity As String

  ' set where the combo will go

  strCombination = Trim (DW. Utilities.fParseString(strRecord, 29, 8, "|"))

  "Store column 7 of 11 of a delimited file

  strDivision = Trim (DW. Utilities.fParseString(strRecord, 29, 5, "|"))

  "To store the column 8 of the 11 of a delimited file

  strEntity = Trim (DW. Utilities.fParseString(strRecord, 29, 8, "|"))

  strCombination = strDivision & strEntity

  End If

  End Function

  Error when importing is as follows:

  Error: An error occurred importing the file.

  Detail: Object Variable or With block variable not set

  What I want to happen is when I import the file, is for the entity column show the result of the concatenation before going through the validation part.

  If you're just trying to concatenate two fields to use as a source for a mapping for the entity dimension, there is a much easier way to do this without script. In your import format to create two entries for the target dimension i.e. entity. The first line contains a reference to the field of the entity of your source (data field 8 of 29), the 2nd line will contain the reference to the field of the Division of your source (data field 5 of 29). If you do this FDM will automatically concatenate the 2 fields together for you.

• FDM Import (integration) Script - import failed

  Good day, colleagues.
  
  That we encountered the following problem. On the 11.1.1.3 integration script import of the system we run of FDM (called "SQLIntegration") Administrator's Guide, it is done properly (in the window pop up the message "Import SQL successful!"), but FDM lance error message "error: failed to import" and no data is loaded. Log file is empty.
  
  Please, share your experience.

  Did you put the function = true at the end?

• I'm built with script problems. I Yes Script and it doesn't help. Is there another suggestion... 20 for a website it madness.

  In addition to what I said. I even uninstalled and install a fresh Firefox. Always be flooded to the script. I spend more time trying to put an end to those that I can on a Web site.

  I left Chrome after 3 years because of the questions on the page does not have in the hope that by returning to Firefox, everything would be good.

  My cache is empty and I've done everything suggested that Firefox and still unable to go to a Web site with this question.

  Have you added any of these sites to the block list in YesScrpt?
  
  This extension is not a bitch at all until the user configures the blocking for each Web site where they get this message.

  I think that your problem is with a script that take too long to run, and that Firefox is you say that. You can try changing that 'time' a script is allowed to run before the message is triggered with this preference.
  
  http://KB.mozillazine.org/DOM.max_script_run_time

  Try 15 or 20 and see how it works.