EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB20567: Is it possible to remove the StackTrace Information from the client side for security purposes in MicroStrategy Web 9.x?


Community Admin

• Strategy


Is it possible to remove the StackTrace Information from the client side for security purposes in MicroStrategy Web 9.x?

For security reasons, an Administrator may want to remove the stack trace information that is embedded in the page source on a Strategy Web 9.x client machine browser from being sent. An example of when this would be applicable would be when a web user types an incorrect user name or password. After doing so, the following stack trace is embedded in the html source code page in the browser:
 


<!--stackTrace:
com.Strategy.webapi.MSTRWebAPIException: (Incorrect login/password)
at com.Strategy.webapi.CDSSXMLServerSession.getUserProjectsHelper(Unknown Source)
at com.Strategy.webapi.CDSSXMLServerSession.GetUserProjectsInCluster(Unknown Source)
at com.Strategy.web.objects.WebProjectSourceImpl.getUserProjectsInClusterHelper(Unknown Source)
...
......
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:770)
-->

To disable the exception from being embedded in the HTML source code, disable the following parameters from the Strategy Web Administrator page under Security:
 

ka04W000000OeuJQAS_0EM4400000028Of.jpeg

 


Comment

0 comments

Details

Knowledge Article

Published:

June 27, 2017

Last Updated:

June 27, 2017