Thomas Chang [
http://community.jboss.org/people/thomas2008ch] created the discussion
"What is Jboss WS Native?"
To view the discussion, visit:
http://community.jboss.org/message/629262#629262
--------------------------------------------------------------
Hi all,
recently I got information that there is a security leak by Jboss WS Native if you use the
DOCTYPE [1]. One of my colleagues had wrote a WS which deployed on Jboss EAP 5.1.0 and
works fine. He told me his WS dosen't use the Jboss WS Native. But after I've
deleted all the Jboss WS Native components such as the jbossws-native-xxx.jar, the
../deploy/jbossws.sar and ../deployer/jbossws.deployer, the WS doesn't work. And I got
"java.lang.ClassNotFoundException: org.jboss.ws.core.jaxws.spi.ProviderImpl"
I wonder how to determine if a WS uses Jboss WS Native or not.
[1]
http://securitytracker.com/id/1026058 http://securitytracker.com/id/1026058
Thomas
--------------------------------------------------------------
Reply to this message by going to Community
[
http://community.jboss.org/message/629262#629262]
Start a new discussion in JBoss Web Services at Community
[
http://community.jboss.org/choose-container!input.jspa?contentType=1&...]