Discussions
Stay up-to-date with the latest news from NetSuite. You’ll be in the know about how to connect with peers and take your business to new heights at our virtual, in-person, on demand events, and much more.
Now is the time to ask your NetSuite-savvy friends and colleagues to join the NetSuite Support Community! Refer now! Click here to watch and learn more!
New AI Community Guidelines. Please review and follow them to ensure AI use stays safe, accurate, and compliant.
Stay in the Know
Be sure you're subscribed to NetSuite communication to stay in the know about monthly happenings, updates and announcements. Subscribe
Be sure you're subscribed to NetSuite communication to stay in the know about monthly happenings, updates and announcements. Subscribe
Banning SuiteScript functions for making HTTP(s) requests in an unauthenticated client-side context
This notice is intended for customers who are using SuiteScript functions for making outbound HTTP(s) requests in an unauthenticated client-side context. Affected users must hide such requests behind a suitelet, available without login.
What is Changing?
Effective March 13, 2023, the usage of the following SuiteScript functions will be forbidden in an unauthenticated client-side context:
- SuiteScript 1
- nlapirequestURL()
- SuiteScript 2
- N/http: request(), get(), post(), put(), delete()
- N/https: request(), get(), post(), put(), delete()
The only exception is inbound (same domain) requests.
Recommended Actions
Identify which scripts are affected. This involves checking suitelets available without login and their dependencies (particularly client scripts). Look for the usages of the affected functions there.
Regards,
@Robert Nedelkow-Oracle | NetSuite Support Community Administrator
0