Illegal Input exception in lookup Api

Question

Hi all,
We have a custom scheduled task to populate the lookup values. The task was working fine. But as per my observation whenever we are getting any values need to go in decode contains *<,>,--* like values "*dummy <ch>*","*the org -- organization*" it throws illegal input exception. The same values when we tried to put through design console was accepted. Does lookup operations api doing some validation? if so is there any way to off this as we cannot ensure about the data containing these special chars. TIA

Answer 1

You would have to edit conf/xlconfig.xml to contain this:
<AppFirewall>
<SecurityLevel>0</SecurityLevel>
</AppFirewall>
(starting at 9.1 this defaults to 1)
However, be aware that this will turn off all sql injection checking in all inputs (api calls, recon data, etc.)
The web ui might still do its own checking on top of that, I actually cannot remember off the top of my head.