Re: Strange behavior of webservices

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Alexander Inochkin (alex_i_at_newsgroup.nospam)
Date: 02/28/05 

Date: Sun, 27 Feb 2005 23:49:03 -0800

So, I can access testing page (by testing mode) from _remote_ computer using
HTTP POST request omiting SOAP. I see here security violation...

"M.Posseth" wrote:

> well i do not see the strangenes ,,,
>
> the invoke button should only be availlabvle on the local machine for
> testing purposes,,,, this is by design
>
> If you are changing header tags etc etc thus fooling the system it believes
> that it runs local the button might appear
>
>
>
>
>
> --
> Met vriendelijke groet
> Kind regards,
>
> Michel Posseth
> Software Developer
> Microsoft Certified Professional
>
>
> "Alexander Inochkin" <AlexanderInochkin@discussions.microsoft.com> wrote in
> message news:8A293363-CC7F-4CF3-BC7D-B5997601FE8C@microsoft.com...
> > Hi!
> >
> > I found same strange behavior of ASP.NET. It is possible this is the bug.
> > Follow the steps:
> >
> > I create the simple service, http://localhost/Test/service.asmx
> >
> > When I go to this link in IE SP.NET shows me page what contains "Invoke"
> > button on it. I can test this service. OK. Late I move this service to
> > remote server. I can execute this service calling
> > http://remote_server/Test/service.asmx. This time I do not found "Invoke"
> > button and can't test service from IE. OK. But when I change header tag
> > "Host" in http request from remote_server to localhost (I can do it
> > connecting to the SOAP Trace Utility on local machine, for example) I can
> > see "Invoke" button again and can test (invoke) method _on_ _the_ _remote_
> > server.
> >
> > This behavior seems me very strange. I tested it on ASP.NET v 1.1.
> >
> > Can you give me some explanation on it.
> >
> > Thanks,
> > Alexander Inochkin.
> >
>
>
>

Quantcast