How to encrypt a parameter in URL- IBM WCS?

1k Views Asked by At

I need to add an encrypted parameter, lets say 'isAdd' in a URL

 www.example.com/aTestPage?isAdd=123

but I am failed to do so, though the parameter is not mentioned in following section of wc-server.xml

  <NonEncryptedParameters display="false">
    <Parameter name="storeId"/>
    <Parameter name="langId"/>
    <Parameter name="catalogId"/>
    <Parameter name="categoryId"/>
    <Parameter name="productId"/>
  </NonEncryptedParameters>

but it is still apparent in URL. What should I do to make 'isAdd' encrypted?

I tried to add it in following section of wc-server.xml but it didn't work.

 <ProtectedParameters>
   <Parameter display="false" name="isAdd"/>
 </ProtectedParameters>

UPDATE: URL generation

   <wcf:url var="aTestPage" value="aTestPage" type="Ajax">
      <wcf:param name="isAdd" value="${isAdd}" />                                       
   </wcf:url>
1

There are 1 best solutions below

5
Tasos Zervos On

Is your URL using HTTPS/SSL? "if the command is to use SSL, then the parameters are encrypted" and all parameters not in the NonEncryptedParameters list will get encrypted [as a single value] and appear as the "krypto" parameter.