Solved

In AEM we generally block all `page.infinity.json` and `page.N.json` requests, as it allows content grabbing and reveals internal node structure including usernames or anything else that might be considered "internal". However, page.json requests (no selector) seem to also render their JSON contents, and this is a lot harder to block unless we generically block the .json extension, requiring all valid JSON URLs to be whitelisted.Is there a way to safely block JSON rendering to close this vulnerability?  Or do we just have to accept that anyone can freely grab your internal node structure and private content such as usernames?  The idea of blocking `.json` ubiquitously, opening up for only a whitelisted set of URLs is tempting to see as an easy solution, but that makes servlets based on resource types rather than static URLs infeasible.NOTE: I understand that JSON rendering by sling can be turned off in "Apache Sling GET Servlet" in OSGi, but then that breaks other OOTB functionalities

Hello,We are investigating opening the mobile channel through campaign. Has anyone integrated with Sinch before? Curious for your experience and also how you set up the external agent.Thank you,Robbie

How has the experience with Adobe Managed Services been so far for those who have migrated to the same?What are the reasons and in which use cases should one recommend this to clients?Is there anything different in terms of integration that has to be kept in mind while using AEM Managed Services?How easy is it to make the transition?

When we deactivate a test in Adobe Target, the Analytics for Target dimension "Target Activity" changes retrospectively. It gets the suffix "... (deactivated)". That breaks all our reports that filter on that particular activity name. Why does this happen and is there a way to aviod it?

Hallo, Can I use the feature "Automated Forms Conversion"  on AEM 6.4 or that only applies to 6.5Best regards

Hi,we have a segment where we exclude "bad traffic" i.e. anormal high amount of hits from an unknown monitor resolution which looks like this is not human.Unfortunately, the segment gets bigger and bigger. It takes minutes to load, so any change takes an hour.Any ideas how to make the segment faster?RegardsStefanie

Hi,there have been almost daily report builder outages for us recently. Clientcare seems to be unwilling to add more capacity which would mean ongoing issues that take up lots of our resources.Are there any other Adobe customers that experience the same issue? Hopefully, together we can convince them to provide more uptime!This is the unhelpful response that I got:"This issue occurred due to the stacking of  API request queue. This happens when there are multiple API or report builder requests form different customer on same data center for the same time slot and when there are too many API or report builder requests scheduled.This entirely depends on the user behavior and the number of incoming requests cannot be controlled by Adobe. At our end, we can only clear up the API queue at the back-end in the the queue gets stuck to allow the files to process.The best practice to avoid this issue is by not scheduling too many requests at the same time and have a difference or gap of 15-30 mi

Hi Adobe Analytics Experts,Is there a role /permission to restrict a user from creating a project? I only want them to see the projects I have shared with them?Regards - Manish

how do remove a segment from a destination.

Hello Adobe Community,IIs there a simple way to get all values to lower case ? spetially for the SDK ? like a plug in or something ?Cheers !

Hi guys,I'm trying to implement a javax.jcr.observation.EventListener:import com.google.common.collect.Lists;import org.apache.sling.api.resource.ResourceResolver;import org.apache.sling.api.resource.ResourceResolverFactory;import org.apache.sling.jcr.api.SlingRepository;import org.osgi.service.component.ComponentContext;import org.osgi.service.component.annotations.Activate;import org.osgi.service.component.annotations.Component;import org.osgi.service.component.annotations.Deactivate;import org.osgi.service.component.annotations.Reference;import org.slf4j.Logger;import org.slf4j.LoggerFactory;import javax.jcr.RepositoryException;import javax.jcr.Session;import javax.jcr.observation.Event;import javax.jcr.observation.EventIterator;import javax.jcr.observation.EventListener;import java.util.List;@Component(immediate=true,   service= EventListener.class)public class KeyValueChangeListener implements EventListener{  Logger log = LoggerFactory.getLogger(this.getClass());  private Session

my instance for author went corrupted and for the meantime I am creating another instance and starting from scratch until technical support can help me. However the forms I created on the server do not download. I press on the download and the dialog comes up I press on download and nothing happens. So question is....is there another way of copying my forms into the new instance? thanks

I installed AEM 6.4.5 and the forms bundle … then I install SSLwith SSL what went wrong

I have created a flow chart with several page types in Adobe Analytics. My steps are titled "Product Details," "Product Results," etc. I am wondering how to break this down into specific product details and results.

Same dialog with ACS commons works in 6.1, but when i am referring my multifield to coral/foundation in 6.4 which has "image select" and trying to save this error is coming.

Reference Adobe Docs at: Configuring Dispatcher AEM docs have a rule that “prevents content grabbing” where the feed selector is prevented for extensions json, xml, and html.# Deny content grabbing for /content and its subtree/0082 { /type "deny" /path "/content/*" /selectors '(feed|rss|pages|languages|blueprint|infinity|tidy)' /extension '(json|xml|html)'}Docs also indicate that the following URLs should all be blocked by your configuration:/content/add_valid_path_to_a_page/_jcr_content.feed/content/add_valid_path_to_a_page/jcr:content.feed/content/add_valid_path_to_a_page/pagename._jcr_content.feed/content/add_valid_path_to_a_page/pagename.jcr:content.feedHowever, dispatcher configs for content grabbing are not blocking those URLs b/c .feed is the extension. Adding to the confusion, it seems that all of the following page URLs return the same thing:- /en.feed.html (blocked by dispatcher rule)- /en.feed (allowed by dispatcher rule)- /en._jcr_content.feed (allowed by dispatcher rule)Ad

Hi there,As I currently understand it, there are 3 types of rules I can use: We sell devices that typically can be upgraded after 4 years. We want to run customers through once, but if the column in the database for the purchase date changes, we want to have them run through the campaign again once they hit that 4-year mark again.Is something like this possible?Thanks!

I want to use a Kafka as a FDA. IF it possible ,I would like to get a guide document . I also want to know if future problems can arise in this case.Thanks.

Hi,I am invoking HttpCleintRequest asynchronously from the JavaScript within the workflow. “compete” function is working fine in all scenarios the except following – In case of invalid authorization token (due to validity expiration) it’s not invoking the complete handler. So, HttpClientRequest.wait activity is indefinitely waiting for the complete action to be performed for this request. I have waited till 1 hour for the completion, but still it’s not invoked (thought that it will set status as timeout in complete action)  My question is how to handle this, which function need to implement to handle this scenario?   Getting below error in the log–  Below is the sample code. Complete part is not invoking whenever there is any error in the Authorization value (highlighted)

Greetings,I am trying to test a very simple scenario on my local install of Adobe Campaign Classic v7 of using an external recipient table for selection & targeting and every time when a delivery is executed I am getting an error "The schema for recipients specified in the transition ('') is not compatible with the schema defined in the delivery template"My workflow has just a Load (RDMS) & Direct Mail DeliveryI have followed the steps below before running the workflow- Create a new Target Mapping and mapped the delivery fields with the external table fields- Created a new workflow template with the new target mapping- Created a new delivery template with the new target mappingWondering what else needs to be done to test this out.Any insights would be very helpful.CheersPallav

I am trying to set a URL variable based on a specific value found within a string value from a Person Object. The Person Object field values are separated by a "|" character for example: |test1|test2|test3|. The Person Object is also checked in the tree on the right column of the Velocity Script modal window. I have tried using .contains and .matches using regex, but, I have not had much luck. Below is a sample of my Velocity Script, the IF statement never returns true when I know the lead I am testing contains the value I am comparing against. The ELSE statement is returned each and every time. The Email I am testing is being tested being sent as a "Person". What could I be doing wrong?:## value looking form in string#set( $stringVal = "test1" )## check if the lead has above value#if( $lead.personObject.matches("(\|)\s*${stringVal}\s*(\|)") ) #set($browserURL = "www.exampleURL1.com")## otherwise lead does not have above value#else #set($browserURL = "www.exampleURL2.com")#end‍‍‍‍‍‍‍‍

Hello,Currently Adobe Analytics provides insight into Exit Pages - type, page views, exit rate etc. However, these are all page metrics. Is there a way to also analyse the events that took place on the Exit pages? Using a fallout funnel I could set up, for example, Page Type = Product Page > Then add File download exists > but what would be the exit metric? Because if I try adding Exits as a metric it doesn't let me and if I try adding Exit Page = Product Page then it wouldn't make sense?We thought of potentially setting up a prop on Actions but was wondering if there was another way.Thank you!

Hello,We currently don't have the feature "segment comparison" in analytics, but are considering to purchase it. Does the segment comparison also let you run analysis on shared audience (like for example coming from Adobe Campaign Classic)?Kind regards,Laura

Hi,When I tried to publish a page using a custom workflow, I received this message when opening AEM inbox. It's saying that "the resource used to start this instance does not exist anymore". May I know what is this message? Any help would be appreciated.The version is 6.2 SP1 with CFP14.Thanks.

Hi,I want to whitelist a URL in Adobe instance. The reason is, I'm trying to do a API call from the instance and getting the following error."The URL 'https://abc.def.com/ghi/' that the script is trying to access is not part of the authorized addresses in urlPermission (serverconf.xml)". This is similar to the one How to perform an API REST call through a Web App ? .I tried to add the following as given in the above discussion. <url dnsSuffix="jsonplaceholder.tipicode.com" urlRegEx="https://.*"/>.The code as follows:<srcSchema _cs="Server configuration (cus)" created="2019-07-30 10:07:58.334Z" createdBy-id="0"           desc="" entitySchema="xtk:srcSchema" extendedSchema="nl:serverConf" img=""           label="Server configuration" labelSingular="" lastModified="2019-07-30 10:18:01.263Z"           mappingType="sql" md5="121321321321321313213311312" modifiedBy-id="0"           name="serverConf" namespace="cus" xtkschema="xtk:srcSchema">  <createdBy _cs="xyz"/>  <mod