Sappress Developers Guide to Sap

8/9/2019 Sappress Developers Guide to Sap

1/47

Bonn Boston


2/47


3/47


4/47


5/47


6/47


7/47


8/47


9/47


10/47


11/47


12/47


13/47


14/47


15/47


16/47


17/47


18/47

Composite Application

Enterprise

PartnerA

B C

Service Interface

Process Step

Component Component Component

Service


19/47


20/47


21/47


22/47


23/47

http://xyz.com/search?string=alert('XSS!');

search

alert ('XSS!')

com.sap.security.core.server.csi.util.StringUtils

CL_HTTP_UTILITY


24/47


25/47


26/47


27/47


28/47


29/47


30/47


31/47


32/47


33/47

A3d641

A3d641

Sender Recipient

Secret Key

Message(Plain Text)

Message(Plain Text)

Message& MAC

(Plain Text)

1

32

A3d641


34/47


35/47


36/47


37/47


38/47

TrustedCA

SecureSale

Inc.

CompSOA

LLC

SecureShipping

Corp.

TrustedBank

Inc.


39/47


40/47


41/47


42/47


43/47


44/47


45/47


46/47


47/47

Documents

Sappress Developers Guide to Sap