enthuware.ocejws.v6.2.20

Moderators: Site Manager, fjwalraven

Post Reply
evefuji
Posts: 21
Joined: Fri Apr 11, 2014 8:57 pm
Contact:

enthuware.ocejws.v6.2.20

Post by evefuji » Sun Jun 08, 2014 6:37 pm

In other question says that DTD is not allowed in Web Services, but in this question the WSDL say DTD is allowed... What is correct?

fjwalraven
Posts: 429
Joined: Tue Jul 24, 2012 2:43 am
Contact:

Re: enthuware.ocejws.v6.2.20

Post by fjwalraven » Mon Jun 09, 2014 12:19 am

Hi,

It is important to know that in the Web Services domain we are not dealing with one specification. SOAP, WSDL and WS-I Basic Profile have their own specifications. They all have a rule about the use of DTD's:

WSDL v1.1 : ALLOWS using other type definition languages via extensibility.

WS-I Basic profile : XML DTDs and PIs may introduce security vulnerabilities. R1008 An ENVELOPE MUST NOT contain a Document Type Declaration.

SOAP v1.1 : A SOAP message MUST NOT contain a Document Type Declaration.

Regards,
Frits

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests