Daniel Kulp created CXF-6585:
--------------------------------

             Summary: Possible to send invalid Soap 1.2 faults
                 Key: CXF-6585
                 URL: https://issues.apache.org/jira/browse/CXF-6585
             Project: CXF
          Issue Type: Bug
          Components: Soap Binding
    Affects Versions: 3.1.2
            Reporter: Daniel Kulp
            Assignee: Daniel Kulp
             Fix For: 3.1.3



The soap 1.2 spec specifically states that the fault "Code" must be one of the 
5 values enumerated in the spec.   However, CXF uses the code set in the Fault 
"as is" without any checks.   Thus, faults can be returned that are not 
processable by compliant clients.  

Note: soap 1.1 spec allows the fault code to be any qname.  This only applies 
to 1.2.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to