oraopensource / apex-sert Goto Github PK

Hello Scott,

Is there a User Guide for the application ? the documents link does not include it
https://github.com/OraOpenSource/apex-sert/tree/269352e68ec93b4ee1f8a72ad651f4ffd1fc9f07/doc

Thanks,
Deepa

Hi,

Issue:

In the ins.sql file in https://github.com/OraOpenSource/apex-sert/blob/master/releases/sert_050100.zip, on line 454, there exists the following code:

dbms_utility.compile_schema(schema => 'sv_sert_050100');

This causes an error when I run it because dbms_utility.compile_schema is case sensitive (https://asktom.oracle.com/pls/asktom/f?p=100:11:::::P11_QUESTION_ID:1418403973266).

Resolution:

I changed line 454 in ins.sql (sert_050100.zip) to the following:

dbms_utility.compile_schema(schema => 'SV_SERT_050100');

Uppercasing the schema name fixes my problem.

Thanks,
Hayden

Hi Scott,

The reports include regions set as NEVER. Can these be excluded in the report ?

Thanks,
Deepa

Hello.
I tried to install it and bumped into wall with "@SV_VERSION@" part of strings used in installation files.
Did I do something wrong?
Or it is supposed I should make a replacement in all installation files with some string, before running ins.sql?

Oracle 11.2.0.4, APEX 18.1 and executed ins.sql from windows cmd.

...
create user sv_sert_@SV_VERSION@ identified by "x" default tablespace "APEX_SERT" quota unlimited on "APEX_SERT" temporary tablespace "TEMP"
                    *
ERROR at line 1:
ORA-00922: missing or invalid option
...

And all subsequent statements failed.

Thanks.

Hi,
running APEX Sert 050102 on 12cR2 and APEX 19.1.
Most of the APP is working, except some sites in Home / Evaluations / etc , e.g. Page Alias SV_XSS_HIDDEN_ITEMS gives the following error:

Unable to bind "APXWS_HL_EXPR_VAL3_3". Use double quotes for multi byte items or verify length of item is 30 bytes or less. Use v() syntax to reference items longer than 30 bytes.

Contact your application administrator.

Looking at the Debug Messages for the session, i see:

• component: APEX_APPLICATION_PAGE_REGIONS Hidden Items (609050028107032777)

• error_backtrace: ORA-06512: at "SYS.DBMS_SQL", line 1427
  ORA-06512: at "APEX_190100.WWV_FLOW_DYNAMIC_EXEC", line 858

• ora_sqlerrm: ORA-01006: bind variable does not exist
  ORA-06512: at "SYS.DBMS_SQL", line 1427

• ora_sqlcode: -1006

• apex_error_code: WWV_DBMS_SQL.UNABLE_TO_BIND_ERR

• is_internal_error: true

• display_location: ON_ERROR_PAGE

• additional_info: Contact your application administrator.
  Error: Unable to bind "APXWS_HL_EXPR_VAL3_3". Use double quotes for multi byte items or verify length of item is 30 bytes or less. Use v() syntax to reference items longer than 30 bytes.
  SID=23
  USER=APEX_PUBLIC_USER
  INSTANCE=1

GET https://apexdev/ords/dev
REMOTE_ADDR=192.168.20.230
REMOTE_USER=APEX_PUBLIC_USER
APEX_LISTENER_VERSION=19.1.0.r0921545
REFERER=https://apexdev/ords/dev/f?p=9002:500:6342170987994::NO:::
HTTP_COOKIE=_ga=GA1.2.881281428.1550047378

CGI: PATH_INFO = /f?p=9002:SV_XSS_HIDDEN_ITEMS:6342170987994:::RP::&cs=3THt0_eXmbEV16VASQvAcehpF0wodfyzN-oiW7o9JA3N-emlJfF6YQmhY9DQHLt5hgePK7nHcP2isio33Tyv5TA

What could be the reason for this ?

Thanks in advance

Running the Sert 5.0 against the Apex 5.0.3
I noticed the following wrongly identified errors (in my opinion):
*Page Authentication: The login page is flagged even though it is defined as "Public Page"
*Page Access Protection: The items on public login page are flagged
*Enable Legacy Authentication Attributes: I believe this does not exists in Apex 5.0 and up
*Post-Logout URL: it Fails but it is set to the "Home Page" so it shouldn't

The Admin Guide mentions the User Guide. Is it available anywhere?

Tomek

I installed sert_050100b3 into an APEX 5.1.4 instance. Copied and pasted the link to APEX-SERT into the System Message in the APEX admin screen. When users clicked on the link, they got an HTTP-404 error. Discovered that the stored procedure "sv_sert_apex.launch_sert" did not exist in the database. I found the code to create launch_sert in the 5.0 branch. I created the procedure in the sv_sert_apex schema and everything is working.

Hi, I was wondering are you still working on compatibility with Apex 18? Here we have an issue with logging. There is 'Your session has expired. Please login to your APEX Workspace again and re-launch APEX-SERT. ' And if I go on SERT from Apex there is an error "Session state protection violation: This may be caused by manual alteration of a URL containing a checksum or by using a link with an incorrect or missing checksum. If you are unsure what caused this error, please contact the application administrator for assistance." Thanks!

Can we create a "global" attribute set in SERT Admin so the Attribute Set is available for all Workspaces? We can create Attribute Sets in each workspace, but it looks like we will have to create the same Attribute Set in each workspace.

When launching the apex-sert and report is created, then if you are on any of the pages belonging to the Dashboard (Issues by Category, Issues by Severity etc...) and want to choose any other page under Dashboard from the main menu (Issues by Category, Issues by Severity etc...), then the links from the main menu under Dashboard do not work ( from the tab menu under Dashboard links work).

Currently using APEX v. 4.2.0

We're trying to run APEX-SERT on APEX 5.0. It was previously working, and we've now updated from using ORDS on Glassfish to ORDS 18 in standalone mode.

Now we get a 403 error from ORDS with the message 'Access to the procedure named: sv_sert_apex.launch_sert is denied.'

Are there any known issues here?