What is everyone doing about attaching documents since the Oct Rel regarding possible malicious?

dawn-turzinski

Prior to the October release we have been uploading successfully the signed protected pdf document to contract attachments. Now, as of Oct we are no longer able to do this. Just wondering what everyone else is doing about this. Saving the PDF as unprotected allows for modification or deletion of the signatures. We were trying to make INFOR the source of truth for the final signed contract. This is for all areas that allow for attachments.

Matt Drewes

"For Review - Use at your own risk!"

"Infor understands that the new security feature recently implemented has disrupted some critical business processes. To help minimize any disruption and allow you to continue your business operations, Infor has provided a method for you to disable this feature yourself.
However, please be aware that disabling this security feature may expose your systems to increased risk. The feature is designed to protect your environment from potential threats and vulnerabilities. Infor strongly recommends carefully considering this action and assessing the associated security implications before proceeding. Below are instructions on how to set the configuration parameter to disable this.
Instructions on how to Disable Scanning for JavaScript
Please follow these steps to disable the PDF Validator configuration via the UI:
Please follow the steps below to disable the PDF Validator for the HRT application:

1. Navigate to the application you wish to update (e.g., HRT, FSM).
   Ensure you have privileges to create a Configuration Parameter.
2. Open the Administration Console and select Configuration Parameters.
3. Create a new Configuration Parameter:
   • Set Predefined Component to security.
   • Set Predefined Name Key to PDFValidatorEnabled.
   • Set Value to false (this disables the validator for the current data area).
4. Save the record.
5. Return to the previous page and verify that the newly created Configuration Parameter appears in the list.
   Once these steps are completed, the PDF Validator will be disabled for the specified data area."