This is an automated email from the ASF dual-hosted git repository.

robertlazarski pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-core.git

commit 2de28465467e0f59a8ca6d5c6f61eaf8b6362640
Author: Robert Lazarski <[email protected]>
AuthorDate: Thu Oct 29 04:37:49 2026 -1000

    Declare allowContentBasedServiceDispatch in the starter's axis2-json.xml
    
    The JSON dispatcher honours this switch since #1319, but the starter's 
bundled config never named it, so Spring Boot users had no visible place to 
find or override it. Declared false with the same explanation as kernel 
axis2.xml.
    
    Co-Authored-By: Claude Opus 5.5 <[email protected]>
---
 .../src/main/resources/META-INF/axis2/axis2-json.xml           | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git 
a/modules/spring-boot-starter/src/main/resources/META-INF/axis2/axis2-json.xml 
b/modules/spring-boot-starter/src/main/resources/META-INF/axis2/axis2-json.xml
index b0f955b614..0e979dc911 100644
--- 
a/modules/spring-boot-starter/src/main/resources/META-INF/axis2/axis2-json.xml
+++ 
b/modules/spring-boot-starter/src/main/resources/META-INF/axis2/axis2-json.xml
@@ -69,6 +69,16 @@
     <!--is set, then Axis2 tries to get the first exception and set its 
message as the faultreason/Reason.-->
     <parameter name="DrillDownToRootCauseForFaultReason">false</parameter>
 
+    <!--Whether a service may be selected from the namespace of the request 
body's
+        first element, as JSONBasedDefaultDispatcher does for an 
application/xml body
+        posted to a URI that names no service. FALSE by default: the Dispatch 
phase runs
+        after the Security phase, so a service bound from message content is 
bound after
+        the handlers that would have authenticated the request for it have 
already run
+        against no service. JSON-RPC dispatch by request URI is unaffected. 
Turn this on
+        only if services are genuinely addressed by body namespace, and not 
together
+        with per-service security modules.-->
+    <parameter name="allowContentBasedServiceDispatch">false</parameter>
+
     <parameter name="userName"></parameter>
     <parameter name="password"></parameter>
 

Reply via email to