CLM/ELM extensions stopped working after appliance of newer iFix ?

So you have applied the latest iFix as that is the best praticse for your CLM/ELM environment just to find out your widgets have stopped working and you cannot find what could be the cause of the problem?

widgeterror.png

 

With the new iFixes starting from versions ELM 7.0.2 iFix004, ELM 7.0.1 iFix009, CLM 6.0.6.1 iFix018, and CLM 6.0.6 iFix022 the IBM has implemented new security measures to prevent Server-Side Request Forgery (SSRF) vulnerabilities.
This measure has changed the behavior of all OpenSocial gadgets and RSS feeds that fetch content from an external service or location which results in errors when trying to add widgets to your side-panel or dashboard that worked flawlessly before.


Solution?

 

In order to fix this issue and get your widgets working again you need to add the location (URLs) of your extension hosting servers into jazz "allowlist" first.
You can find the allowlist in JTS application in Admin menu. Navigate to "Advanced properties" and search for "allowlist". 
Here add all URLs resolving to your hosting servers separated by comma without space. (You can type in an asterisk "*" instead to allow all traffic.)


allowlist.png

 

After this step you need to also add required URLs to the whitelist of CLM/ELM application that you are using your widgets with.
For example if you want to add your widgets to RM applications, navigate to https://yourdomainame.com/rm/admin.
At the bottom of the side-menu click on "Whitelist" and add the required URLs here one by one.


whitelist.png

 

Now you may continue working with your widgets.

*It may take up to 10 minutes to take changes into effect.

* If you want more information regarding this measure, visit https://www.ibm.com/support/pages/node/6466981



Image

Softacus AG

Löwenstrasse 20
8001 Zürich
Switzerland
E-Mail: info@softacus.com
Tel.: +41 43 5087081
Fax: +41 43 344 6075 

VAT: CHE-108.817.809 MWST
D-U-N-S® Number 486800618

Image

Softacus GmbH

Westendstrasse 28
60325 Frankfurt am Main
Germany
E-Mail: info@softacus.com
Tel.: +49 69 34876544
Fax: +49 69 5830 35709

VAT: DE301903892
D-U-N-S® Number 313482703

Image

Softacus s.r.o.

Křídlovická 351/47A
603 00 Brno
Czech Republic
E-Mail: info@softacus.com
Tel.: +420 530333482
Fax: +41 43 344 6075

VAT: CZ07286333
D-U-N-S® Number 496165108

Image

Softacus s.r.o.

Tatranské nám. 3
058 01 Poprad
Slovakia
E-Mail: info@softacus.com
Tel: +421 911 083 612
Fax: +41 43 344 6075

VAT: SK53507070
D-U-N-S® Number  2121388148