You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Daniel Kulp (Created) (JIRA)" <ji...@apache.org> on 2012/01/23 19:36:39 UTC

[jira] [Created] (CXF-4056) Faults on server are echoing headers back to the client

Faults on server are echoing headers back to the client
-------------------------------------------------------

                 Key: CXF-4056
                 URL: https://issues.apache.org/jira/browse/CXF-4056
             Project: CXF
          Issue Type: Bug
          Components: Soap Binding
    Affects Versions: 2.5.2
            Reporter: Daniel Kulp
            Assignee: Daniel Kulp
             Fix For: 2.4.7, 2.5.3



The SoapHeaderOutFilterInterceptor that filters out the incoming headers is only installed on the Out chain.  It's not installed on the OutFault chain.  Thus, all the incoming headers are echoed back to the client which could result in WS-Addressing issues, security issues, etc...

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (CXF-4056) Faults on server are echoing headers back to the client

Posted by "Daniel Kulp (Resolved) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-4056?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Kulp resolved CXF-4056.
------------------------------

       Resolution: Fixed
    Fix Version/s: 2.3.10
    
> Faults on server are echoing headers back to the client
> -------------------------------------------------------
>
>                 Key: CXF-4056
>                 URL: https://issues.apache.org/jira/browse/CXF-4056
>             Project: CXF
>          Issue Type: Bug
>          Components: Soap Binding
>    Affects Versions: 2.5.2
>            Reporter: Daniel Kulp
>            Assignee: Daniel Kulp
>             Fix For: 2.3.10, 2.4.7, 2.5.3
>
>
> The SoapHeaderOutFilterInterceptor that filters out the incoming headers is only installed on the Out chain.  It's not installed on the OutFault chain.  Thus, all the incoming headers are echoed back to the client which could result in WS-Addressing issues, security issues, etc...

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira