-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

If we a receive a SOAP 1.1 message, via http, it MUST contain a SOAP
action [1]. It can be empty but the header must be there.

I just looked at our AxisServlet code and that validation code seems to
be missing now. It identifies the SOAP version by looking at the content
type, but doesn't care about the SOAPAction header when the message
qualifies as a SOAP 1.1 message.

I can remember I put this checking some time back. Was this removal
intentional and if yes can I please know why? Please forgive me if this
was discussed and already decided to do so.

Thanks,
Chinthaka

[1] : http://www.w3.org/TR/2000/NOTE-SOAP-20000508/#_Toc478383528
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG4jC2jON2uBzUhh8RAlJeAJ4q4OX6+HYVJY0r422InT+g0VPulACgmb7t
H0oLb0FTHjt8HzOrj7Gnbjw=
=8I4e
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to