Question Re: SAPUI5 get current browser URL in Technology Q&A

SAPUI5 get current browser URL

former_member2654 — Thu, 19 Nov 2020 14:05:44 GMT

Hello All,

Is there a better way to get the browser URL rather than using 'window.location.href'. Since href is being recognized by any security apps as something exploitable and since it is open for manipulation in debug, we would like to use something more secure. Waiting your help & suggestions..

Best,

Merve

Re: SAPUI5 get current browser URL

junwu — Thu, 19 Nov 2020 14:27:26 GMT

your whole js code is open for manipulation,

why you worried about 'window.location.href'?

Re: SAPUI5 get current browser URL

former_member2654 — Thu, 19 Nov 2020 14:46:07 GMT

Using 'href' is the only exploitable statement that we came across in the security check of our apps. That's why we focused on this statement specifically. The rest of the code is already as they should be in js, but this is something which can be improved.

Re: SAPUI5 get current browser URL

sergei-u-niq — Thu, 19 Nov 2020 16:20:46 GMT

Jun Wu is right. your whole JS is open for manipulation. But depending on the security apps that recognise location.href as insecure, maybe

window["loca"+"tion"]["hr"+"ef"]

will be OK 🙂

Re: SAPUI5 get current browser URL

junwu — Thu, 19 Nov 2020 16:33:53 GMT

what your code does with the window.location.href?

Re: SAPUI5 get current browser URL

leoirudayam — Mon, 23 Nov 2020 14:49:35 GMT

As long as you only access window.location.href in a reading manner, it's fine. If you try to manipulate it and assign it a different value, it could be potentially caught by some security app scan.