Security Validation issue in Forms Server with June CU

This is fixed in the August 2011 CU.  The method OnLoad no longer exists.

====

As noted at Security Validation Issue – Form Services issue with SP1+June 2011 CU (Release 2) and at June CU Post Update Regression?, there is a security validation issue within Forms Server when switching views with a PeoplePicker or Attachment item within a Form.
The reason for this is the addition of an OnLoad event in the EntityEditor.
In SP1, the EntityEditor.cs in the Microsoft.SharePoint.WebControls namespace lacks an OnLoad event.  Unhelpfully, an OnLoad event exists in the June CU:

As noted in the above links, disabling Security Validation will work around this issue until Microsoft provides a fix.  Most likely what needs to happen is the ValidateFormDigest needs to occur both on initial page load as well as Post Back.

The Group check that fails as noted in the first link above happens with SP1 as well, so it is probably a non-issue (also as indicated that it happens with the attachment functionality of an InfoPath form as well as only on PostBack).

One Comment

  1. This same issue is occuring after we have updated our SharePoint 2010 enviornment to April 2013 CU.

Leave a Reply