enthuware.ocejws.v6.2.20
Posted: Sun Jun 08, 2014 6:37 pm
In other question says that DTD is not allowed in Web Services, but in this question the WSDL say DTD is allowed... What is correct?
Hi,
It is important to know that in the Web Services domain we are not dealing with one specification. SOAP, WSDL and WS-I Basic Profile have their own specifications. They all have a rule about the use of DTD's:
WSDL v1.1 : ALLOWS using other type definition languages via extensibility.
WS-I Basic profile : XML DTDs and PIs may introduce security vulnerabilities. R1008 An ENVELOPE MUST NOT contain a Document Type Declaration.
SOAP v1.1 : A SOAP message MUST NOT contain a Document Type Declaration.
Regards,
Frits