Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-4108

Dispatch provider accepts any request

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Not A Problem
    • 2.5.2
    • None
    • JAX-WS Runtime
    • None
    • Unknown

    Description

      Start the server of the jaxws_dispatch_provider sample. Send a totally unrelated request to the endpoint of the sample server. For the request actually sent see attachment request.txt

      Expected behaviour: the service returns a fault with code = client stating an unknown operation was invoked.

      Actual behaviour: One of the service operations is called and normal response is returned, see attachment response.txt

      Also replacing the empty soapAction values in the sample WSDL with distinct values yields the same result.

      Note: This behaviour can also be observed with other provider based services. Of course here the business code might return a fault because the structure of the request is not the expected one. Still already CXF should not accept the requests.

      Attachments

        1. request.txt
          0.5 kB
          Zsolt Beothy-Elo
        2. response.txt
          1 kB
          Zsolt Beothy-Elo

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            Unassigned Unassigned
            zbeothy Zsolt Beothy-Elo
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment