SAPUI5 get current browser URL

[junwu]

Hello All,

Is there a better way to get the browser URL rather than using 'window.location.href'. Since href is being recognized by any security apps as something exploitable and since it is open for manipulation in debug, we would like to use something more secure. Waiting your help & suggestions..

Best,

Merve

[junwu]

your whole js code is open for manipulation,

why you worried about 'window.location.href'?

[former_member2654]

Using 'href' is the only exploitable statement that we came across in the security check of our apps. That's why we focused on this statement specifically. The rest of the code is already as they should be in js, but this is something which can be improved.

[sergei-u-niq]

Jun Wu is right. your whole JS is open for manipulation. But depending on the security apps that recognise location.href as insecure, maybe

window["loca"+"tion"]["hr"+"ef"]

will be OK 🙂

[junwu]

what your code does with the window.location.href?

[leoirudayam]

As long as you only access window.location.href in a reading manner, it's fine. If you try to manipulate it and assign it a different value, it could be potentially caught by some security app scan.