Randall Vasquez
2015-06-10 00:50:26 UTC
A client has specified that it is a security concern for them to show component/class names within error messages/faults
I have a webservice set up and have tried to capture this issue using a handler but it seems that the issue is caught before any handler can be invoked.
The issue occurs when an empty namespace is used.
Example:
Partial Message:
<Envelope xmlns:soapenv=""....
</Envelope>
Partial Response:
com.ctc.wstx.exc.WstxParsingException: Non-default namespace can not map to empty URI (as per Namespace 1.0 # 2) in XML 1.0 documents
at [row,col {unknown-source}]: [1,26]
This seems to be caught in the Axis Servlet before any flows or handlers can be called.
Any help would be appreciated,
Randall.
I have a webservice set up and have tried to capture this issue using a handler but it seems that the issue is caught before any handler can be invoked.
The issue occurs when an empty namespace is used.
Example:
Partial Message:
<Envelope xmlns:soapenv=""....
</Envelope>
Partial Response:
com.ctc.wstx.exc.WstxParsingException: Non-default namespace can not map to empty URI (as per Namespace 1.0 # 2) in XML 1.0 documents
at [row,col {unknown-source}]: [1,26]
This seems to be caught in the Axis Servlet before any flows or handlers can be called.
Any help would be appreciated,
Randall.