{"id":18899147,"url":"https://github.com/skltp/patch-cxf-rt-bindings-soap","last_synced_at":"2025-04-15T02:36:29.642Z","repository":{"id":57742952,"uuid":"51356530","full_name":"skltp/patch-cxf-rt-bindings-soap","owner":"skltp","description":"⛔️ DEPRECATED ⛔️","archived":true,"fork":false,"pushed_at":"2016-10-06T07:29:47.000Z","size":29,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-02-20T17:17:42.056Z","etag":null,"topics":["deprecated","java","mule"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/skltp.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-02-09T09:09:18.000Z","updated_at":"2024-04-11T08:24:46.000Z","dependencies_parsed_at":"2022-09-11T03:41:15.265Z","dependency_job_id":null,"html_url":"https://github.com/skltp/patch-cxf-rt-bindings-soap","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skltp%2Fpatch-cxf-rt-bindings-soap","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skltp%2Fpatch-cxf-rt-bindings-soap/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skltp%2Fpatch-cxf-rt-bindings-soap/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skltp%2Fpatch-cxf-rt-bindings-soap/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/skltp","download_url":"https://codeload.github.com/skltp/patch-cxf-rt-bindings-soap/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248995100,"owners_count":21195497,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["deprecated","java","mule"],"created_at":"2024-11-08T08:45:40.428Z","updated_at":"2025-04-15T02:36:29.349Z","avatar_url":"https://github.com/skltp.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# patch-cxf-rt-bindings-soap\nPatch för Apache CXF för att bibehålla bakåtkompabilitet med tidigare versioner för hantering av soapAction vid webservice-anrop.\n\nPatchen är avsedd för Mule-3.7.0 och ska ge bakåtkompabilitet med Mule-3.3.1 vad gäller soapAction.\nSe även: https://skl-tp.atlassian.net/browse/SKLTP-808\n\n## Beskrivning: SoapAction i webservice-anrop\n* Mule-3.7.0 kräver att HTTP-header \"soapAction\" ska vara satt till samma värde som i WSDL - eller inte vara satt alls, annars fås ett fel.\n\n* Mule-3.3.1 verifierade inte detta, dvs släppte igenom sådana anrop.\n\n* Detta beror på en säkerhetsuppdatering i underliggande webservice-ramverk Apache CXF (Mule-3.3.1: cxf-2.5.1, Mule-3.7.0: cxf-2.7.15) där spoofing av anrop med felaktig soapAction förhindras, ref: http://cxf.apache.org/cve-2012-3451.html\n\n## Deployment av patch\n1. Ladda ned patch från: http://search.maven.org/#search%7Cga%7C1%7Cg%3A%22se.skltp.patch.cxf.rtbindingssoap%22%20AND%20a%3A%22skltp-patch-cxf-rt-bindings-soap%22\n2. Lägg skltp-patch-cxf-rt-bindings-soap-VERSION.jar i katalogen: mule-standalone-3.7.0/lib/user\n\n## Testning\nTesta med ett webservice-anrop (t ex till VP) som har en felaktig soapAction http-header satt.\n\nSka fungera efter patch, men inte innan för Mule-3.7.0.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fskltp%2Fpatch-cxf-rt-bindings-soap","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fskltp%2Fpatch-cxf-rt-bindings-soap","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fskltp%2Fpatch-cxf-rt-bindings-soap/lists"}