Email address with apostrophe is not passed to incident lookup plugin
search cancel

Email address with apostrophe is not passed to incident lookup plugin

book

Article ID: 421092

calendar_today

Updated On:

Products

Data Loss Prevention Core Package

Issue/Introduction

The environment uses an incident lookup plugin to add contextual user data to DLP incidents.
When the sender email of an SMTP incident contains an apostrophe, the "sender-email" argument is not passed to the lookup plugin via STDIN/STDOUT, and the lookup plugin script fails.

Environment

Symantec Data Loss Prevention 16.x - 25.1

Resolution

This is scheduled to be resolved in DLP 26.1