Update "execCommand()" function on ACC | Community
Skip to main content
muralipraveenr1
Level 2
Jun 11, 2020 8:27 PM UTC
Solved

Update "execCommand()" function on ACC

Hi All,

 

As part of a requirement, we want to remove some logging statements in the function "execCommand(systemCommand, true)"  in the Workflow javascript activity.

but we couldn't find the origin/implementation of this function in any of the javascript codes on the client console.

 

Please help us, where we can edit this function.

 

Thanks in Advance.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Jonathon_wodnicki
Jonathon_wodnickiAccepted solution
New Participant
Jun 15, 2020 6:05 PM UTC

Hi,

 

The workflow logs are mutable- they're just rows in xtk:workflowLog.

Create a wrapper for execCommand() that runs execCommand and then deletes the log rows it generated.

 

Thanks,

-Jon

View reply

6 replies

Jonathon_wodnicki
Jonathon_wodnickiAccepted solution
New Participant
Jun 15, 2020 6:05 PM UTC

Hi,

 

The workflow logs are mutable- they're just rows in xtk:workflowLog.

Create a wrapper for execCommand() that runs execCommand and then deletes the log rows it generated.

 

Thanks,

-Jon

Translate
Milan_Vucetic
Milan_Vucetic
Level 9
Jun 12, 2020 6:53 AM UTC

Hi @muralipraveenr1 

 

I do not think this is possible.

You can blacklist some commands (like: ln, dd, openssl, curl, wget, python, python3, perl, ruby, sh, bash, dash, zsh, base64, nlserver, node, phantomjs, java, awk, nc, telnet, ssh, scp, ftp) in exec part in serverConf.xml

You may try with execCommand(systemCommand, false) which should disable output.

If not, you may consider using Bash script inside JS to avoid this command.

 

Regards,

Milan

Translate
    Darren_Bowers
    Darren_Bowers
    Level 9
    Jun 11, 2020 11:54 PM UTC

    Hi @muralipraveenr1 - can you give us an example of the logs you are seeing?

    Translate
    muralipraveenr1Author
    Level 2
    Jun 12, 2020 3:47 PM UTC

    Hi @darren_bowers ,

    LOG: XSV-350201 Execute the command 'curl -v  -k 'sftp://<serverURL>' --user "username:password" -Q "rm ‘filename’” with user.

    As you can see we had to pass the password as part of the curl command, but with the command getting logged, there’s a chance for the password breach to the groups which are not intended to see the password. so if there's any way to avoid this log that would be helpful.

    Thanks!

    Translate
    Terms & ConditionsAccessibility statement

    Loading footer...