Users receive an error message when attempting to execute a prompted report in Strategy Web.
The exact error message reports "403: Access forbidden" followed by:
Due to the presence of characters known to be used in Cross-Site Scripting Attacks, access is forbidden. This web site does not allow URLS which might include embedded HTML tags.
A possible cause of this issue is that one of the characters in the encoded URL is a forbidden character according to the security setting provided by the third-party security application, such as SiteMinder.
The security application blocks certain characters by default for security reasons, so when Strategy encodes the URL with forbidden characters, the URL is prevented from being passed to the application server.
Modify the name of the report to remove the restricted characters. One of the possible characters, for example, is an ampersand (&).
Third Party Software Installation WARNING
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability.
