IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Script tag with IV_JCT added to json response

    Posted Thu May 20, 2021 03:51 PM
    I have an issue where the json parser on the browser side throws exception. I notice that the json response has a script tag with IV_JCT included  at the beginning and I suspect it was added by WebSeal. I also noticed that the response header is text/html; charset=utf-8 and I believe it should be application/json. Can I fix this without relying on the server to make changes? 

    Thanks


    ------------------------------
    Kelly Kerr
    ------------------------------


  • 2.  RE: Script tag with IV_JCT added to json response

    Posted Thu May 20, 2021 05:41 PM
    Kelly,

    The JSON response is returned from a junction that has the Scripting Support (-j) option enabled.  This option adds the junction-cookie setting script to HTML responses.
    See https://www.ibm.com/docs/en/sva/10.0.1?topic=cookies-junction-cookie-concepts

    You are correct that the backend server is misidentifying its content with the content-type response header.  If the Scripting Support option is needed, the backend server team will have to correct the content-type header value.

    Regards

    ------------------------------
    Steve Hughes
    ISVA Support
    ------------------------------