How To Prevent Disclosure Of Content Metadata When Linking Content Using the GET_FILE Service (Doc ID 1497185.1)

Last updated on SEPTEMBER 21, 2023

Applies to:

Goal

By appending parameters to the such as 

• &IsSoap=1
• &IsPageDebug=1
• &IsJava=1 

anonymous/guest users can obtain the metadata on a content item with public/guest access.

For example:
http://hostname:port/<context_root>/idc/idcplg?IdcService=GET_FILE&dDocName=TEST_DOC&RevisionSelectionMethod=LatestReleased&Rendition=Web&&IsSoap=1

The workarounds below will allow you to prevent disclosure of the metadata details.
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.