xcaliber2222
Programmer
Hello,
No matter what I try my local web service works fine. I've been able to consume the web service locally with a test application that passes in parms to my web method. I've tried to send the xml sent as a separate attachment to the web service via http post and cannot get past a security related IIS error when trying to pass that in a query string:
A potentially dangerous Request.QueryString value was detected from the client (<xml_string>![CDATA[<?xml version="...="UTF-8"?><soap:Envelope xmlns...").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case.
Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.QueryString value was detected from the client (<xml_string>![CDATA[<?xml version="...="UTF-8"?><soap:Envelope xmlns...").
I've tried wrapping it in CDATA tags, adding the validateRequest=false in the pages section of the web.config and the page directive in the asmx page (but neither works) and some other approaches but to no avail. So, I am going to set-up remote debugging on our staging server so you can post the xml to our web service so hopefully we can step into it in real time as the xml is passed to the web method. The xml seems to be well formed but there is something happening in the xml during the post operation that the webservice method does not like.
The web method is for (non-primitive) complex data types and again, works when we run our consuming test class which passes parms to this web method. Because the WebMethod is expecting a List, the webservice will not provide the test harness UI input fields.
Here is the xml:
<?xml version="1.0" encoding="UTF-8"?><soap:Envelope xmlns:xsi=" xmlns:xsd=" xmlns:soap=" <soap:Body><SetStatusTest xmlns="</Password><VendorID>testco</VendorID><JobID>12345678</JobID><Dttm>2009-11-09T17:34:00-07:00</Dttm><BOL>
</BOL><Pieces>1</Pieces><Weight>45</Weight><WaitTime>0</WaitTime><CostAmount>0.00</CostAmount><CostNote>
</CostNote><AdtlStopFlag>N</AdtlStopFlag><SecondDrvHrs>0</SecondDrvHrs><AttemptCount>0</AttemptCount>
<AWBList><AWB><AWBNum>4444-3333</AWBNum><Description>2 taped as 1</Description><PCSList><Weight>45</Weight></PCSList></AWB></AWBList></SetStatusDrop></soap:Body></soap:Envelope>
I would appreciate any help, suggestion or point in the right direction.
Thanks,
Alejandro
No matter what I try my local web service works fine. I've been able to consume the web service locally with a test application that passes in parms to my web method. I've tried to send the xml sent as a separate attachment to the web service via http post and cannot get past a security related IIS error when trying to pass that in a query string:
A potentially dangerous Request.QueryString value was detected from the client (<xml_string>![CDATA[<?xml version="...="UTF-8"?><soap:Envelope xmlns...").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case.
Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.QueryString value was detected from the client (<xml_string>![CDATA[<?xml version="...="UTF-8"?><soap:Envelope xmlns...").
I've tried wrapping it in CDATA tags, adding the validateRequest=false in the pages section of the web.config and the page directive in the asmx page (but neither works) and some other approaches but to no avail. So, I am going to set-up remote debugging on our staging server so you can post the xml to our web service so hopefully we can step into it in real time as the xml is passed to the web method. The xml seems to be well formed but there is something happening in the xml during the post operation that the webservice method does not like.
The web method is for (non-primitive) complex data types and again, works when we run our consuming test class which passes parms to this web method. Because the WebMethod is expecting a List, the webservice will not provide the test harness UI input fields.
Here is the xml:
<?xml version="1.0" encoding="UTF-8"?><soap:Envelope xmlns:xsi=" xmlns:xsd=" xmlns:soap=" <soap:Body><SetStatusTest xmlns="</Password><VendorID>testco</VendorID><JobID>12345678</JobID><Dttm>2009-11-09T17:34:00-07:00</Dttm><BOL>
</BOL><Pieces>1</Pieces><Weight>45</Weight><WaitTime>0</WaitTime><CostAmount>0.00</CostAmount><CostNote>
</CostNote><AdtlStopFlag>N</AdtlStopFlag><SecondDrvHrs>0</SecondDrvHrs><AttemptCount>0</AttemptCount>
<AWBList><AWB><AWBNum>4444-3333</AWBNum><Description>2 taped as 1</Description><PCSList><Weight>45</Weight></PCSList></AWB></AWBList></SetStatusDrop></soap:Body></soap:Envelope>
I would appreciate any help, suggestion or point in the right direction.
Thanks,
Alejandro