[jbossws-issues] [JBoss JIRA] Updated: (JBWS-723) Protect access to wsdl

Protect access to wsdl ---------------------- Key: JBWS-723 URL: http://jira.jboss.com/jira/browse/JBWS-723 Project: JBoss Web Services Issue Type: Task Security Level: Public(Everyone can see) Components: jaxrpc Reporter: Thomas Diesler Assigned To: Thomas Diesler Fix For: jbossws-1.0.5 Hello, the reason for protecting the wsdl file, is that the wsdl file can give valuable information for starting a Web Service related attack, according to the bibliography (see for example: Hacking Exposed, Web Applications, Scambray J., Shema M., McGraw Hill; Hacking Exposed, J2EE & Java, Taylor B., Buege R., Layman A., McGraw Hill). Spyros Halkidis