403 Forbidden when adding JSP to email template

[Community_User]

Originally posted on July 13 2020 at 15:41 UTC

Hi, Version of SSM is 5.5 SP2
Email template that I'm trying to create:
A new account has been created for ${user.firstname} ${user.lastname} in the ${task.endpoint.endpointname} application. <br>
Account name is ${task.accountName} <br>
<%
if(${task.endpoint.endpointname} == 'Active Directory') print "Account password is ${task?.password}"
%>

- IAM Team

As soon as I try to save this - it gives me a 403 forbidden error. If I remove the <% %> JSP portion, the template saves fine. What am I doing wrong here?

Is this not supported anymore?

[Community_User]

Originally posted on July 14 2020 at 04:13 UTC

HI Suparna, Let me check on this and get back to you.

THanks

Ajay

[Community_User]

Originally posted on July 14 2020 at 13:52 UTC

Hi Suparna,

I have checked this and it works perfectly on my local. I would suggest to open a devops ticket as it seems to be WAF issue.

Thanks

Ajay

[Community_User · Accepted solution]

Originally posted on July 14 2020 at 16:36 UTC

Hi Ajay,

Thanks, just confirming that you tried on SP2 of 5.5?

I'll raise a Devsecops ticket for this as well.

Thanks,
Suparna