Clarity PPM: Using certain text in the Status Report string fields will make some special characters (\r\n) appear

Document ID : KB000122837
Last Modified Date : 11/12/2018
Show Technical Document Details
Issue:
Using certain text in the Status Report string fields will make some special characters (\r\n) appear.

Steps to Reproduce
  1. For a given project, go to Properties > Status Reports (cop_prj_statusrpt)
  2. Create a new Status Report
  3. Copy and paste the following text into the Status Report Update attribute (or any other long String type field such as Key Accomplishments, Upcoming Activities...)
Some text.
Confirm (something else).
  1. Save the Status Report

Expected Results: The text is saved as it was copied or typed.

Actual Results: Special characters will appear. The text will look like this: Some text.\r\nConfirm (something else).

Cause:
The text contains the java script function "confirm (any string here)" to display the confirmation message box which PPM escapes to avoid potential XSS attacks. You will see the same for the following keywords:
(alert | eval | expression | prompt | confirm)[\r\n\s]*\((.*?)\)
Resolution:

This was reported as DE45234 and is not a defect.

Users should refrain in using this type of string in text fields.
The customer can use square brackets "[" "]" or curly braces "{" "}"and the system will not encode the string.