Using DIAGNOSTIC=NO (in rwservlet.properties) For Hiding Web Commands Like showmap, showenv, showjobs (Doc ID 260243.1)

Last updated on JULY 05, 2016

Applies to:

Oracle Reports Developer - Version 9.0.2.0 to 10.1.2.3 [Release 9i to 10gr2]
Information in this document applies to any platform.
Checked for relevance on 17-May-2014
DIAGNOSTIC is a new parameter added to rwservlet.properties file


Goal

If you are coming across this document, Oracle strongly recommends 10g customers to upgrade to 11g in order to be covered for related security issues released in the October 2012 Security Advisory. At this time, 11g customers should refer to the latest CPU for cumulative fixes and instructions.

Critical Patch Updates (CPU) and Security Alerts
  •     Check for latest Security Advisory and a Patch Availability Document for your product
  •     A Security Advisory documents the vulnerabilities for a specific CPU release.
  •     A Patch Availability Document provides the cumulative patches and instructions for each product version within Lifetime Support as defined by Error Correction Policy Policies (Note 209768.1).

 

Hiding web commands like
.../showenv...
.../showmap...
.../parsequery...
.../showjobs...
.../killjobid...
.../getjobid...

SHOWMYJOBS can not be disabled with DIAGNOSTIC

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms