Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Security External theme root not html escaped, SAP security note 1151557

SAP Note 1151557
SAP Security Note
High priority

SAP security note 1151557, “Security: External theme root not html escaped”, is a program error note released on 09.11.2009. Below are the symptom and SAP recommended solution.

ComponentBasis Components > Web Dynpro > Web Dynpro ABAP > Web Dynpro ABAP Runtime
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version3
StatusReleased for Customer
Released on09.11.2009
LanguageEnglish

Description

Symptom

A security problem has occurred in Web Dynpro ABAP.

Solution

We strongly recommend that you implement this note if you use Web Dynpro ABAP applications that contain FileDownload UI elements. This is particularly important if these applications are also available on the Internet or are related to applications that are available on the Internet.

Implement the attached correction instructions to correct the error.

Reason and prerequisites

This problem is caused by a program error.

References

Full note on SAP: SAP Support Launchpad note 1151557

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Security #Web Dynpro ABAP #Web Dynpro Runtime

Explore More