Can't edit WF task with 403 error and strict-origin-when-cross-origin in Chrome console

Products

• CA Service Desk Manager

Issue/Introduction

Users cannot edit a workflow task when using Edit in List. When the Save button is clicked and hourglass spins but never completed. This was reported by several users and in several different browsers. We tried clearing browser cache, clearing application cache, and rebooting the server. Workflow tasks can be edited successfully using other methods. 

With Chrome console open, this error shows up when click on the save button on the edit in list page:

Request URL: https://SDM-server/CAisd/pdmweb.exe Request Method: POST Status Code: 403  Remote Address: 1.2.3.4:443 Referrer Policy: strict-origin-when-cross-origin cache-control: no-cache, no-store content-length: 758 content-type: text/html strict-transport-security: max-age=31536000 x-iinfo: 14-24137905-0 PNNN RT(1626112971608 0) q(0 0 0 -1) r(0 -1) B15(1,10055,1) U6 :authority: SDM-server:method: POST :path: /CAisd/pdmweb.exe :scheme: https accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 accept-encoding: gzip, deflate, br accept-language: en-US,en;q=0.9 cache-control: no-cache content-length: 201 content-type: application/x-www-form-urlencoded cookie: _ga=GA1.2.1657095945.1585601589; visid_incap_1719097=LyeZtgOlRUSM/twIHswymv9egl4AAAAAQUIPAAAAAAATSnwWc+QX3eBsvpHea07O; visid_incap_1914892=lcQ2JD2RQmORWnSlj1eepJAfg14AAAAAQUIPAAAAAADKt7ciRewF+0YRBO4kujh7; vis

Environment

Release : 17.1/17/2/17/3

Component : SERVICE DESK MANAGER

Resolution

This is due to network security policy. Please work with your network security team to disable the offending policy strict-origin-when-cross-origin.