cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Daniel Kulp (Commented) (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CXF-4108) Dispatch provider accepts any request
Date Tue, 14 Feb 2012 14:56:03 GMT

    [ https://issues.apache.org/jira/browse/CXF-4108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13207756#comment-13207756
] 

Daniel Kulp commented on CXF-4108:
----------------------------------


As Glen stated, this is per JAX-WS spec.  The Provider stuff in JAX-WS puts the developer
completely in control of pretty much everything.

However, you can turn on schema validation and it would reject a message if it cannot validate
it against the schema.   That may be enough for what you need.

                
> Dispatch provider accepts any request
> -------------------------------------
>
>                 Key: CXF-4108
>                 URL: https://issues.apache.org/jira/browse/CXF-4108
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-WS Runtime
>    Affects Versions: 2.5.2
>            Reporter: Zsolt Beothy-Elo
>         Attachments: request.txt, response.txt
>
>
> Start the server of the jaxws_dispatch_provider sample. Send a totally unrelated request
to the endpoint of the sample server. For the request actually sent see attachment request.txt
> Expected behaviour: the service returns a fault with code = client  stating an unknown
operation was invoked.
> Actual behaviour: One of the service operations is called and normal response is returned,
see attachment response.txt
> Also replacing the empty soapAction values in the sample WSDL with distinct values yields
the same result. 
> Note: This behaviour can also be observed with other provider based services. Of course
here the business code might return a fault because the structure of the request is not the
expected one. Still already CXF should not accept the requests.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message