If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

HTML Item

Started by missspeedy23, 11 Apr 2016 07:41:09 AM

Previous topic - Next topic
Print
Go Down Pages1
User actions

missspeedy23

11 Apr 2016 07:41:09 AM
Hi

I have a HTML item in a report that returns a document image from a document store. We want to set it so that the user can't change the reference to view a different document and the best way I can think to do this is to hide the address bar so it can't be edited. Does anyone know how to amend this HTML to load the HTML without showing the address bar please?

<html>
<body>

<a href="http://IPADDRESS/di/view?RD=INV,REF=123456"" target=_blank">

Show Image
</a>

</body>
</html>

bdbits

#1
12 Apr 2016 08:55:33 AM
Is this a security issue? As long as a URL is involved, a savvy user is still going to be able to determine the URL and paste it into another browser session. If nothing else, it is likely going to appear in the page source which is quite easily obtained.

If you can do this, a better approach might be to build a service to assign a very long and unpredictable hash value to a document, and use that to fetch the image. As long as the hash is sufficiently long and unpredictable, the likelihood of guessing the hash is very very small. A truly secure solution would probably require the SDK, some developer skills and knowledge of your systems so the image could be streamed back instead of referenced by URL.
Print
Go Up Pages1
User actions
BSP Software Documentation
MetaManager Documentation and Knowledgebase
Version Control Documentation and Knowledgebase
BSP Software Resources About Us
MetaManager BSP Software Training BSP Software
Integrated Control Suite YouTube Channel Micro Strategies Inc
Security Migration IBM Cognos
Integrated Management Suite