Cross-site scripting error in IE(Internet Explorer)

[tanuja8]

When trying to access the Number Fields present on the Dashboard in Internet Explorer I am getting an error as - "Internet Explorer has modified the page to help prevent cross-site scripting"

Can you people suggest where can I look into and What can I do to fix the Problem ??

[SanjivMeher · Accepted solution]

Refer the below link.

Re: Browser error on certain records: "Internet Explorer has modified this page to help prevent cros...

It seems to be a known issue that will be fixed in the Jakarta release. There are few workaround known for this :

1. Disable the XSS Filter in IE

Go to IE-11 Internet Options, Security Settings, Custom Level and Disable the "Enable XSS Filter". However, their security team did not want this workaround, as:

"The patch (https://technet.microsoft.com/library/security/ms16-084) is addressing important IE security vulnerabilities, It is not recommended to disable 'XSS Filter' as this will open up security vulnerability and wanted to check if we could to fix the issue from the application end."

2. Add or modify the "glide.template.max_context" (in the sys_properties table) which as a default value of 15 and change it to a larger number. The default is set in UI Macro called "template_context".

3. Add manually "glide.remove_ie_xss_protection" (in the sys_properties table) and set it to true.

[gmccullough]

Thank you, your answer worked great.

This is just for simple people like me:

I typed   "sys_properties.list" in the filter navigator which got me to the System Properties list and then I was able to complete the instructions.

Changed "glide.template.max_context" value from 15 to 20

Added "glide.remove_ie_xss_protection" with Type "true | false" with the value of "true"

Thanks again Sanjiv,

Gary McCullough

Service Automation Manager

[Paul Ciarfella]

The problem still exists in Jakarta patch 6.   What a PITA IE is.

[SanjivMeher]

Hi Tanuja,

Can you mark it answered to remove from unanswered Questions