Changing the APEX framework Error Message

I was wondering if anyone could help me out here. I am faced with a security issue where I need to hide any and all APEX framework error messages. Specifically, I need to hide the error messages on the screen you get when trying to access an application that doesnt exists (the whitescreen with the red "x"). This had been implemented already in the past, however, the 4.2 upgrade knocked it out. To change this in 4.1.1 is just a matter modifying the APEX_040100.WWV_FLOW_ERROR package.
Does anyone have any suggestions here? Any and all would be appreciated!
Thanks in advance,
Shawn

What is the specific security issue you are facing?
This sounds like a generic penetration test, perhaps something along the lines of "Error messages reveal the underlying technology" or "Error messages can contain information helpful to an attacker". This is because of the ORA- messages. I would push back on this and see if you can argue the point that;
a) The technology can not be hidden, we (for example) have written detection routines for nessus to detect APEX without relying on any error output.
b) Ask for a *specific* example where the framework error message has lessened the security posture of the application/framework.
c) If you cannot then you really do need help to ensure that any changes/patches to the framework do not decrease application stability. What is the risk to the business? Can the business accept this low risk?
d) Just because somebody saw an 'ORA-01403: no data found' message once doesn't instantly mean you are insecure.
Though saying that, it would be a good feature to suggest, certainly a 'turn all errors off' might easily combat these types of over-zealous security reports: https://apex.oracle.com/pls/apex/f?p=55447
regards,

Similar Messages

Is it possible to change the sytem defined Error Message

Hi All,
Is it possible to change the sytem defined Error Message: "Reason codes with automatic charge-off are not permitted here" to Warning Message. If so, how can I search in which application area this message defined in OBA5 screen?
Other details for this issue:
Message: Reason codes with automatic charge-off are not permitted here
Message Class: F5,
Message No: 605.
Thanks
Chandra

Hi,
Without investigating deeper for this specific error message, I can say that the messages that cannot be maintained through OBA5 will in some cases remain in the system even if maintained in OBMSG. If message is not allowed for change in OBA5 and there is no OSS note regarding this message, it means that SAP designed it this way. Changing the nature in OBMSG (which is not standard or recommended SAP operation) will not always save the problem; the message could be simply hard-coded in the program with 'E' attribute.
Regards,
Eli

Change the af:inputListOfValue error message when enter invalid value?

Hi all,
I am using JDeveloper 11.1.1.2.0
When I have af:inputListOfValue in page and put invalid value the error message will appear. I want to display my own error message. How can I change the LOV invalid number error message?
Thank You...
Sameh Nassar
Edited by: Sameh Nassar on Aug 20, 2010 5:52 PM

Refer:
Section 28.10, "Customizing Error Handling"
in below link:
http://download.oracle.com/docs/cd/E14571_01/web.1111/b31974/web_adv.htm#ADFFD19884
Amit
I guess above post won't you much .. I spend sometime on this issue as it got my attention
It seems there is very less info on how can we over ride default bundle message for the "Invalid Value" error we get
however you can create your validator for LOV and handle the validation and message in that..
Here is the link that provides a good detail on how to create / register a validator.
Once registered you can update the Validator ID of f:validate of LOV and remove the binding property value.
Edited by: amseth on Aug 20, 2010 1:03 PM

How do I change the language of ADF framework error messages?

I'm a beginner in ADF and JDeveloper and I tried to run one of the tutorials for ADF (Build a Web Application with JDeveloper 11g Using EJB, JPA, and JavaServer Faces).
While clicking through the application I got errors like this one:
ADF_FACES-60097:Pentru mai multe informaţii, consultaţi jurnalul de erori al serverului, pt. o intrare care începe cu: ADF_FACES-60096:Excepţie server în cursul PPR, nr. 1
My question is how do I set the JDeveloper/WebLogic to show these messages in English (in order to have better chances while searching this forum :) )?
I'm not talking about messages that I define in my application, but about framework error messages.
I already set USER_LANGUAGE=en in <JDEV_HOME>\.product.properties, but no luck.
Note that WebLogic server messages are in English (e.g. <Warning> <J2EE> <BEA-160195> <The application version lifecycle event listener oracle.security.jps.wls.listeners.JpsAppVersionLifecycleListener is ignored because the application HR_EJB_JPA_App is not versioned.>), only ADF messages are presented in Romanian.
Thanks,
Bogdan

I suspect that these messages are considered "system" ones (e.g. not for the user), so they are not generated in the user's locale but in the JVM's default locale. On Windows machines default JVM locale is taken from Windows Regional Settings. If you do not want to change your Regional Settings, you can try Java system properties "user.language" and "user.country". Try to add the following line to WebLogic domain's <tt>setDomainEnv.cmd</tt> script:
set JAVA_OPTIONS=%JAVA_OPTIONS% -Duser.language=en -Duser.country=USA restrart of the server is required.
In Bulgaria we do not have such problems because ADF Faces messages do not have Bulgarian translation, so they are generated in English regardless of the fact that our Regional Settings are set to Bulgarian.
Dimitar
Edited by: Dimitar Dimitrov on May 3, 2011 7:40 PM

When i attempt to download a 'free' app from the app store error message comes up: "Account Not in this store- your account is not valid for use in the US store. You must switch to the Guyanese store before purchasing."

when i attempt to download a 'free' app from the app store error message comes up: "Account Not in this store- your account is not valid for use in the US store. You must switch to the Guyanese store before purchasing."

Change App Store
1. Tap "Settings"
2. Tap "iTunes & App Stores"
3.Tap "View Apple ID"
4. Enter your user name and password.
5. Tap "Country/Region."
6. Tap "Change Country/Region"
7. Select the region where you will be located.
8. Tap "Done".

Overwriting framework error messages of simple types

Hi
Is it possible to overwrite the framework error messages of simple types? For example: Instead of "Enter the value in the format -2,733.34" we prefer something like "Enter the percent value in the format 0.00 to 100." or "Enter a correct percent value.".
Use case: We use for the most input fields for any numbers (telefon, amount, age, ...) the simple type "decimal", this offers following advantages:
- optional use (and framework validation) of fraction digits
- the input field has no default value (integer/long/short writes as default "0" to the input field, that is in most cases - for example post/zip code - not useful)
Otherwise decimal simple types has the disadvantage, that if the user write any letters in the (decimal) input field, the error message is as described above and so not very helpful too.
Thanks in advance
Stefan

Hi Stefan
Unfortunately seems no way to customize the error messages.
1. If the standard numeric simple type does not suit your needs, theoretically you can try to override the Java class of the standard type and add your custom messages/logic. For example, for Integer this is DdTypeInteger & DdTypeInt. Methods you need to override is format(...) and parse(...). After this in controller's code you should create a new attribute and provide your own custom type as input parameter.
I never tried this way
2. You can make the attribute as Calculated. Then in getter/setter you should put your custom formatting/parsing logic.
BR, Siarhei

HT201262 cannot go to cmd+V or S, I cannot change my password. -error message ===boot file path system library coreservices boot.efi.... Please help.

cannot go to cmd+V or S, I cannot change my password. -error message ===boot file path system library coreservices boot.efi.... Please help.

Got it thanks macjack . Command + S on restart.
In this case Nad69-Breizh did you try restarting with the option key down and re-selecting the boot drive.
If no Recovery option, try command option R for internet recovery. Takes some time to load up.

I have a problem syncing iCal on my Macbook air (10.7.5) and my iPhone 4s (5.1.1) over iCloud. The following server error message comes up "The request (CalDAVAccountRefreshQueueableOperation) for account "iCloud" failed." Been to Apple - no luck. Ideas?

I have a problem syncing iCal on my Macbook air (10.7.5) and my iPhone 4s (5.1.1) over iCloud. The following server error message comes up "The request (CalDAVAccountRefreshQueueableOperation) for account “iCloud” failed." Been to Apple Store - no luck instore, or with Super genius over the phone when with genius in store, taking data in real time via ethernet!
I had to do a full wipe of my system because of time machine back up issues 2 weeks ago, and the error has only occured at some point since then. I only did a drag and drop of my user account folders/files into an External HDD rather than a copy of my user account (advised by the staff in store at Apple to do this) and when reimported, the Mail folders are all present but each message is in a sub-sub-sub folder that is numerically named. I do not have a mirror image of the hard disk prior to the wipe, only a time machine back up from 2 weeks prior to it being done. I am uncertain if this reinstall has caused the issue.
I am not happy to upgrade the software in my iPhone until I have the calendars working. I have purchased Mountain Lion, but again am concerned about upgrading until the issues are sorted.
I have tried the other solutions on here with no luck. HELP please.
Many Thanks.

Progress Update.
I made a back of what existing phtos and Videos I had on my Iplhone. I used Image capture to do this making an entire back up of photos and videoa that were still intact on the phone.
Image capture is god for this purpose, as it does exactly what you ask it to do without applying any rules or squishing the files back into iphote (which might also be corupted)
Image capture wil do the basic function of retriving the contents of the phone and save them as native files on your hard drive.
Once I did this I erased my iphone, and re intitialised it restoring an older back up from icloud.
As the retore was happneing - I did retreive the missing files that cuased the intial beviour as above, and I could play the videos that were missing in the above scenerio. The wierd ting was however that even though the source files were now back on the device, the thumbnail previews were missing. Where I ahd balck thumb nails for server portions of the resotred content.
I then went to bed as the restore is a long process. When I woke up the library had library had cleaned itself up. Mysteriously the prcess had deleted the files missing the their thumbnails.
This is very perculiar and bad behavior.
I am now repeating the process, and will attempt to download the missing content as it is restored and prior to the phone trying to fix itself.
Here are the lessons learned.
DO NOT rely on Photo Stream to keep back ups and synchornise videos from you IOS device. IT DOES NOT SUPPORT THIS CAPBILITY
DO NOT rely on iCloud Back Up alone - always fd an occassional iTunes back up or more reliably still always take a back up of photos and video files using Image Capture to be doubly sure that you a have backd up any content.
DO THIS NOW - dont wait to loose your phone ofr have your phone repaired by replacement at the apple Store. (I did both :-(

Firefox is very slow to respond when opening and nearly always stops responding altogether even refusing to react to Task Manager "End Program@ command. The "not responding@ error message also comes up during navigation on line.

Firefox is very slow to respond when opening and nearly always stops responding altogether, even refusing to react to the Task Manager "End Program" command. The "not responding" error message also comes up during navigation on line. Several attempt have to be made to get on line. A loss of stability seems to be endemic at the moment.

Try following the instructions here: [[Firefox hangs]]

I started the newest update for my phone but when it started installing it to the phone, a error message showed up and now my phone is stuck in recovery mode and itunes wont recognize it. what do i do?

started the newest update for my phone but when it started installing it to the phone, a error message showed up and now my phone is stuck in recovery mode and itunes wont recognize it. what do i do?

Any numbers or other details on the mesages given?
Did you try to connect in recovery mode again? iOS: Unable to update or restore
In case your network connection timed out, check your security software settings: iTunes for Windows: Troubleshooting security software issues

TS5376 I just attempted to update my apple iTunes to 11.1.4 which resulted in the msvcr80.dll error message. I followed all of the instructions above and now I can't get past the Service 'Apple Mobile Divice failed to start. Help!!!

I just attempted to update my apple iTunes to 11.1.4 which resulted in the msvcr80.dll error message. I followed all of the instructions to move the .dll's to the desktop, I removed iTunes via the control panel, and now I can't get past the Service 'Apple Mobile Divice failed to start. Verify that you have sufficent privilidges to start systems services. I now have no iTunes on my laptop, can't reinstall iTunes, and I am pulling my hair out because I can not figure out how to send an e-mail to Apple because I bought my iPad just over a year ago. PLEASE HELP!!!
V/r "TRACER"
CDR Harold W. "TRACER" Valentine, SC, USN

Solving the iTunes Installation Problems in Windows
1. Apple has posted their solution here: iTunes 11.1.4 for Windows- Unable to install or open - MSVCR80 issue.
2. If the Apple article does not fully resolve the problem for you, then try Troubleshooting issues with iTunes for Windows updates - MSVCR80.

Script Alert: "Sorry I could not process the following files" (Error Message using Image Processor)

I'm a seasoned Photoshop/Bridge CS5 user who recently upgraded to CS6. In Bridge I just ran my first Image Processor batch, trying to convert a set of RAW .NEF files to .PSD files with a basic editing action I created applied to them. Photoshop CS6 opens the files from Bridge and applies the actions, but then I get the "Script alert" error message "Sorry I could not process the following files" and a list of all of the files in the batch I was trying to run the script on. The files all remain open and are saved on my hard drive in a folder created by the Image Processor script, but do not close unless I manually close them. I never had this problem in CS5 where the image processor would apply the desired actions to the batch of photos one at a time, then save and close. Thoughts on how I can fix this bug?

Hey Jeff--
No specific action steps to make the image safe - no flattening, etc. Had problems narrowing down the specific action step causing the problem. So I ran the Image Processor script in the ExtendScript ToolKit and debugged in. (I'm using the version that shipped with CS4.)
Turns out what was happening is that the app.activeDocument.close() command on line 1490 was never getting called, because the this.SaveFile() above it was throwing an exception. More debugging got me to the problem - SaveFile() tries to restore the history state after making a doc safe for saving as a JPEG. This causes an exception. So I commented out line 1571:
// app.activeDocument.ativeHistoryState = historyState;
The script runs just fine after this. I commented out the close to see what history states got added to the doc, but no new states are recorded, so commenting out the restore line should not cause any problems.
Of course, my solution does not solve the problem and I may need to comment out all the saveFile() lines that does this. Not sure why some actions have this problem and others don't. The actions I am running have about 25 steps. Perhaps PS is not catching up quick enough. I added a $.sleep(2500) after the restore history but that didn't help.
So, not sure where this gets us. I will check about posting an action set with just one of the actions that cause the problem. But I may also have our customer comment out that line of the Image Processor script.
Hope this helps. May post more next week.

Itunes document manager pro will not open a document with .cwk extension. It will catch the document then error message states that it cannot open document. Can anyone tell me what Im doing wrong?

Itunes document manager pro will not open a document with .cwk extension. It will catch the document then error message states that it cannot open document. Can anyone tell me what Im doing wrong?

Forgive my ignorance but I have never hear of iTunes Document Manager Pro. If you mean Document Manager Pro, i was able to find that. Back to your problem, have you tried opening one of those files in the iOS iWorks apps? Form the quick read that I did about this, .cwk files can be opened by Pages, Numbers or Keynote, depending on what type of document that it is and those files can be read by Document Manager Pro, after properly saving them. I don't see that you can go directly from the .cwk file in Document Manager Pro without converting them first.
I took a very quick look at the app, so I may be a missing something about its capability.

How to change the priority level of message sent to market place.

Hi to all gurus,
I have rasied a query at market place. I raised the query with medium priority and now want to change it to high or very high priority as user is badly in need of the module for which the query is raised.
How can i changed the priority of this message while I have not yet got reply for the same from SAP and the status is under process.
Thanks and Regards

Hello
The hotline number of your local Support Customer Interaction can be found in SAP note 560499 - Global Support Customer Interaction.
Either phone call or email and they will raise the priority accordingly.
Regards
Michael

How do you change the color of text messages?

Can you change the color of text messages? If so, how?

Two colors. Blue and green.
Green is for text message. Blue is for iMessage. You can't change these, though.

Changing the APEX framework Error Message

Similar Messages

Maybe you are looking for