xml-soap-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From d..@us.ibm.com
Subject RE: add doGet support
Date Fri, 11 Aug 2000 20:45:43 GMT

Actually, I don't mind the idea of another servlet taking on this role,
instead of
RPCRouterServlet, and in fact I tried to do just this initially, but found
that I needed
a lot of the same logic in RPCRouter and rather than duplicating code
duel maintenance) I just moved it into RPCRouter.  Also, I tried to
separate out the
logic in RPCRouter that I needed into a another method but trying to pull
out the
SOAP logic from the servlet code wasn't going to be clean - plus I think
else might have already posted code to do this?  I didn't see anyone
on it yet though.  How about I wait until this other code change happens,
or not,
and then submit another servlet based on that decision?

"Steven J. McDowall" <sjmcdowall@uswest.net> on 08/11/2000 02:17:19 PM

Please respond to soap-dev@xml.apache.org

To:   <soap-dev@xml.apache.org>
Subject:  RE: add doGet support

I still don't like this approach for a couple of reasons..

1) You are overloading the functions for RPCRouter by adding Admin logic
to it, which has nothing to do with RPCRouting at all.. THis is bad

2) There IS a security issue.. Many web servers can assign ACL's based on
URI/URL but in your case it is on the METHOD (POST/GET) which is very rare
and not obvious..

3) the "admin" URL already does what you want mostly.. If you want XML
back from any requests, then I think it logical to put a Servlet for
that sort of Admin processing somewhere under the "admin" tree ..

I'm not saying that the idea isn't useful, but it does not belong
in RPCRouterServlet IMO.


View raw message