Skip to main content


         This documentation site is for previous versions. Visit our new documentation site for current releases.      
 

Modified parameters in the mashup code prevent access to the mashup channel

Updated on February 7, 2022

When you modify parameters in your mashup code that the system validates, the mashup might not work.

Condition

If users change specific parameters in the mashup code and want to run the application on the host page, the server responds with HTTP status 403. The browser displays the following message: Unregistered mashup request for channel : <<channel ID>>.

Cause

When you implement a web mashup, the system authenticates the HTTP request before streaming back the application that is displayed in the Pega gadget on an external web page. If users modify any of the parameters that the system validates, the system detects access violation and displays the error page.

If the pyBlockUnregisteredRequests when rule is set to true, and the system receives an HTTP request with the isWebMashup=true parameter and a valid ChannelID parameter, the system validates the parameters for the mashup channel in the following order:

  1. pyActionNameWhen
  2. pyActivity (which you set to @baseclass.doUIAction for all the mashup actions, except for the openWorkByURL action)
  3. pyHasDynamicParams
    • If the mashup is configured with pyHasDynamicParams=true, the system does not validate action parameters or custom parameters.
    • If the mahsup is configured with pyHasDynamicParams=false, the system validates the corresponding action parameters. If the mashup contains custom parameters, the system validates also the custom parameter key and value that are configured in the mashup channel.

      If you modify any of the action or custom parameters, the system displays an error message.

The system validates the following properties in the mashup channel against the HTTP request parameters received for the corresponding action:

Action Properties
createNewWork
  • pySelectedFlowClass
  • pyLPSelectedFlowName
display
  • pyDerivesFrom
  • pyHarnessName
  • pyMashupModel
getNextWorkNot applicable
openAssignmentpyOpenAssignment
openWorkItempyWorkID
openWorkByHandlepyParamKey
openWorkByURLpyQueryParam

Solution

  1. Restore the mashup configuration:

    • If you have the original values of the parameters that the system validates, restore the original parameter values.
    • If you do not remember the original values of the parameters that the system validates, regenerate and redeploy the mashup code. For more information, see Creating a mashup.
  • Previous topic Mashup code is not consistent with the latest security enhancements
  • Next topic Pega Digital Experience (DX) API

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best.

Pega.com is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us