0

Good day.

i am hoping that someone could assist me. I am creating a web service (this is the first time i have ever created a web service). i have worked with web services/API in the past from a client side by creating soap xml messages and sent and received messages back and forth. Now i need to create my own web Service and am needing a little assistance with creating it correctly.

i initially created a simple web method as follows.

[WebMethod(Description = "Soap Request")]
public string Request(string xmlDocument)
{
   //do work
}

but when i tried consuming this method i received the following error:

System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client

i then tried (after googling) to change the method as follows:

[WebMethod(Description = "Soap Request")]
public string Request(XmlDocument xmlDocument)
{
  //do work
}

but that didnt seem to work either, when i tried to send an xml soap message to this method it came through empty. What i then did was to create the method with parameters matching the elements in my xml Soap message. the method then picked up each element and populated the parameters correctly as follows.

public void Request(string parm1, string parm2)
{
  //do work
}

with the following xml

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:tem="http://tempuri.org/">
   <soapenv:Header/>
   <soapenv:Body>
      <tem:Request>
         <tem:Parm1>111</tem:Parm1>
         <tem:Parm2>222</tem:Parm2>
      </tem:Request>
   </soapenv:Body>
</soapenv:Envelope>

i would like to find out, is this the correct way to handle the incoming message or is there something else i should be doing to accept the incoming xml message? i thought that i could create the method as i had initially done that it would accept the xml string passed to it and i could work with the message as i did when receiving xml message back from web services i used in the past.

please forgive me if i have duplicated a question, i could not find anything that would give me a definite answer.

i have started creating the web service in Visual Studio 2019.

any assistance or advise would be greatly appreciated.

B.W
  • 33
  • 6
  • See following. Should the request be signed? Is the request http (non secure) or https (Secure) : https://stackoverflow.com/questions/81991/a-potentially-dangerous-request-form-value-was-detected-from-the-client – jdweng Apr 03 '20 at 12:18
  • Hi jdweng. thanks for your reply. i did see that post. i did seem to get past that by testing my methods in SOAP UI. i have a parameter as 'XmlDocument' but when i post the xml from soap ui i only seem to get the first element. Regarding my above question, is it to have a method with various parameter and pass the xml soap message to it like that? – B.W Apr 06 '20 at 08:12
  • You probably have a namespace issue. There are two defined namespaces "soapenv" and "tem". So make sure your parsing includes the namespaces. – jdweng Apr 06 '20 at 08:54

1 Answers1

0

I was having the exact same issue. So in my project I just added this to my web.config/system.web/httpRuntime:

requestValidationMode="2.0"

And It just worked!

Add this to web

Timisorean
  • 1,388
  • 7
  • 20
  • 30
ndrespulido
  • 19
  • 2