OAM 11gR2PS2: ResourceURI of Authorization Events are Garbled when using Non UTF-8 Encoded Characters (Doc ID 2117993.1)

Last updated on SEPTEMBER 14, 2023

Applies to:

Symptoms

• Applied <Patch:19812896> Oracle Access Manager (OAM) Audit log can report "ResourceURI" field for Authorization Events.
• ResourceURI of Authorization Events are Garbled when using Non UTF-8 Encoded Characters in the log
• Example, a client browser accesses the following protected web site

http://test.example.com/app/page?param={Parameter String}

Three Japanese Katakana characters [Te] [Su] [To] are set as URL parameter.

The following are URL encoded characters of them. 

When using encoded characters as Shift-JIS (other than UTF-8), garbage characters appear into ResourceURI due to decoding them as UTF-8. A part of characters are replaced with Unicode REPLACEMENT CHARACTER (U+FFFD).

Access URL Example:

Audit Log Output:

The ResourceURI other than Authorization Events report full-URL which is not decoded.

Changes

Steps to Reproduce:

1. Enable the audit log in OAM.
2. Apply <Patch:19812896> to OAM.
3. Access a protected web site using URL encoded characters, for example;
http://test.example.com/app/page?param=%83e%83X%83g

Additional Information

See <Document:1997227.1> for the detail of <Bug:19812896>

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.