-allowAutoFieldsInData

(As of 3.4.001.01)

Control whether Automatic Fields originating from the data file are resolved.

Syntax

-allowAutoFieldsInData Y|N

Description

Input data may contain Automatic Fields such as:

Env Path: [!Env PATH]

When resolution is enabled, [!Env PATH] is replaced with the server’s PATH environment variable, which can expose environment variables, internal paths, runtime parameters, or sensitive configuration data in the generated document.

Set the option to N to prevent Automatic Fields in input data from being resolved:

-allowAutoFieldsInData N

The default is Y for backward compatibility.

Effect on form scripts

Setting the option to N also prevents automatic resolution in form script strings. For example, [!Env PATH] will remain unresolved here:

this._value = this._value + " Env Path: [!Env PATH]";

To resolve an Automatic Field intentionally in a trusted script, use _resolve():

this._value = this._value + _resolve(" Env Path: [!Env PATH]");