My Oracle Support Banner

Using DIAGNOSTIC=NO (in rwservlet.properties) For Hiding Web Commands Like showmap, showenv, showjobs (Doc ID 260243.1)

Last updated on DECEMBER 23, 2019

Applies to:

Oracle Reports Developer - Version 9.0.2.0 to 10.1.2.3 [Release 9i to 10gr2]
Information in this document applies to any platform.
DIAGNOSTIC is a new parameter added to rwservlet.properties file


Goal

If you are coming across this document, Oracle strongly recommends 10g customers to upgrade to 11g in order to be covered for related security issues released in the October 2012 Security Advisory. At this time, 11g customers should refer to the latest CPU for cumulative fixes and instructions.

Critical Patch Updates (CPU) and Security Alerts
  •     Check for latest Security Advisory and a Patch Availability Document for your product
  •     A Security Advisory documents the vulnerabilities for a specific CPU release.
  •     A Patch Availability Document provides the cumulative patches and instructions for each product version within Lifetime Support as defined by Error Correction Policy Policies (Note 209768.1).

 

Hiding web commands like
.../showenv...
.../showmap...
.../parsequery...
.../showjobs...
.../killjobid...
.../getjobid...

SHOWMYJOBS can not be disabled with DIAGNOSTIC

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
 Hiding Verbose Error Messages
 Configuring the Reports Servlet
 General Issues and Work Arounds when accessing Web Commands With DIAGNOSTIC set to NO
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.