RE: XML as a WebService parameter
- From: stcheng@xxxxxxxxxxxxxxxxxxxx (Steven Cheng[MSFT])
- Date: Fri, 09 Nov 2007 03:08:30 GMT
{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\lang2052\f0\fs20 Hi Bill,
\par
\par From your description, you have an ASP.NET webservice (asmx endpoint) which has a webmethod accepting a XML string parameter, and you'll get validation error when you call the webservice, correct?
\par
\par regarding on the webservice, I'd like to confirm the following things:
\par
\par ** The xml parameter of your webmethod is of "String" type, correct?
\par
\par ** How are you consuming the webservice, through the asmx page(via http post) or through a generated client proxy class?
\par
\par Generally, for XML webserivice, since its underlying message is encoded via SOAP XML, therefore, we should not directly pass parameter or return value of raw XML string content. Here is a former blog article which has mentioend this:
\par
\par #Rant: Don't return XML in string variables
\par http://blogs.msdn.com/mpowell/archive/2004/05/12/130637.aspx
\par
\par Also, if you do need to pass XML string content, you can consider the following means:
\par
\par ** manually perform htmlencoding on it so that all the xml content are in escaped format
\par
\par ** use a CDATA section to wrapper the xmlstring.
\par
\par Here is a forum thread discussing on this problem too:
\par
\par #Passing an XML string as part of an XML Web Service
\par http://forums.asp.net/p/1064300/1631786.aspx#1631786
\par
\par Sincerely,
\par
\par Steven Cheng
\par
\par Microsoft MSDN Online Support Lead
\par
\par
\par
\par ==================================================
\par
\par Get notification to my posts through email? Please refer to
\par http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
\par ications.
\par
\par
\par
\par Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
\par where an initial response from the community or a Microsoft Support
\par Engineer within 1 business day is acceptable. Please note that each follow
\par up response may take approximately 2 business days as the support
\par professional working with you may need further investigation to reach the
\par most efficient resolution. The offering is not appropriate for situations
\par that require urgent, real-time or phone-based interactions or complex
\par project analysis and dump analysis issues. Issues of this nature are best
\par handled working with a dedicated Microsoft Support Engineer by contacting
\par Microsoft Customer Support Services (CSS) at
\par http://msdn.microsoft.com/subscriptions/support/default.aspx.
\par
\par ==================================================
\par \tab
\par
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par
\par
\par
\par
\par
\par
\par \pard\li720 -------------------
\par From: =?Utf-8?B?QmlsbEF0V29yaw==?= <BillAtWork@xxxxxxxxxxxxx>
\par Subject: XML as a WebService parameter
\par Date: Thu, 8 Nov 2007 05:43:01 -0800
\par
\par Hi,
\par We recently converted a 1.1 project to 2.0 and this included a webservice
\par which accepted XML for one of the parameters. Since converting to 2.0 I am
\par getting the following message:
\par ---
\par A potentially dangerous Request.Form value was detected from the client
\par (myparam="<root><blah....").
\par ---
\par
\par The fix used for ASPX pages is to include the @Page directive with
\par validateRequest="false" however this does not work for ASMX pages ("The
\par directive 'Page' is unknown").
\par
\par Does anyone know of a way to turn this off for webservices?
\par
\par Thanks!
\par
\par \pard
\par
\par }
- Follow-Ups:
- RE: XML as a WebService parameter
- From: BillAtWork
- RE: XML as a WebService parameter
- Prev by Date: Re: Efficient Asynchronous Call to Webservice
- Next by Date: RE: XML as a WebService parameter
- Previous by thread: Re: Efficient Asynchronous Call to Webservice
- Next by thread: RE: XML as a WebService parameter
- Index(es):
Relevant Pages
|
Loading