<allowRedirectedResponses> Element

Article
09/15/2006

Specifies whether responses can be redirected to a FaultTo or ReplyTo header.

<microsoft.web.services2> Element
<messaging> Element

<allowRedirectedResponses enabled="true|false" />

Attributes and Elements

Attributes

Attribute	Description
enabled	Required attribute. Specifies whether the response to a SOAP message can be redirected to the values specified in the FaultTo or ReplyTo headers The default value is false.

Child Elements

None.

Parent Elements

Element	Description
<messaging> Element	Controls the messaging settings for the Microsoft Web Services Enhancements.

Remarks

Before adding the <allowRedirectedResponses> element to a configuration file, you must add the microsoft.web.services2 configuration section handler to the configuration file. For details about adding the microsoft.web.services2 configuration section handler, see <section> Element (WSE for Microsoft .NET).

Use the <allowRedirectedResponses> element to specify whether WSE should honor the FaultTo and ReplyTo headers of an incoming SOAP message. If the enabled attribute is set to true, then the response to a SOAP message will be sent to the address specified in the FaultTo or ReplyTo header, if present. If the enabled attribute is set to false, then the response to the SOAP message will be sent directly to the sender of the message, ignoring the redirection headers.

Note

If the enabled attribute is set to true then you must make certain that the addresses listed in the FaultTo and ReplyTo headers can be fully trusted. Never allow the response to a SOAP message to be redirected unless you have authorized the signer to use response redirection and the sender has digitally signed these header elements with a valid digital signature that you have verified.

Example

The following code example specifies that all incoming messages will ignore the FaultTo and ReplyTo headers and that responses will be sent directly to the sender of the SOAP message.

<configuration>
  <microsoft.web.services2>
    <messaging>
      <allowRedirectedResponses enabled="false" />
    </messaging>
  </microsoft.web.services2>
</configuration>

Share via