May 27 2019

BIOVIA CISPro Forward Slash no longer allowed in user-input report parameters

CISPro

A new Configuration Variable was enabled in the BIOVIA CISPro/CISPro Cloud 2016 SP1 HF4 update titled "report_parameter_white_list".  This new setting lists characters that are allowed to be used in SQL report parameter values (user input fields before running a report).  Any character not included in this list will not be allowed to be used in the report parameter field.
 
Most notably, the forward slash " / " character is no longer allowed in user-input report parameter fields.  Therefore, a value like a date will no longer be accepted in a format using slashes (MM/DD/YYYY).  Dashes must now be used in place of slashes (MM-DD-YYYY).
 
If a report is attempted to be generated and a value is passed from the report parameter field that contains a prohibited character, an "Invalid SQL" error will be thrown and the report will not run.
 
The default list of allowed characters is:
 
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789.[]!@#$?<>,+-*.
 
Note: The space character is always allowed in report parameters and single quotes are automatically escaped.
 
Resolution:
In user-input report parameter fields, use dashes in place of forward slashes if entering a date (MM-DD-YYYY rather than MM/DD/YYYY).
Error Mesage:
Invalid SQL - When trying to run a report with a user-input value including an unallowed character.