Protect media requests


Use the Sitecore media request protection feature optimally.

The media request protection feature restricts media URLs that contain dynamic image-scaling parameters, so that only server-generated requests are processed. This ensures that the server only spends resources and disk space on valid image-scaling requests.

You can make your solution more secure and use the Sitecore media request protection feature optimally, if you make a small change to the Sitecore.Media.RequestProtection.config file.

To optimize the media request protection feature:

  • Open the /App_Config/Include/Sitecore.Media.RequestProtection.config file and change the Media.RequestProtection.SharedSecret setting to a random string.


In a multiserver setup, you must use the same value for the Media.RequestPro tection.SharedSecret setting on every server. This ensures that dynamic image scaling works correctly in situations where one server generates the image URL and another handles the request.