＆QUOT;测试窗体只能用于来自本地计算机的请求＆QUOT。 [英] "The test form is only available for requests from the local machine."

问题描述

我创建.NET中的Web服务等服务文件的地址，有一个漂亮的自动生成解释它是如何工作的。当我从它的托管在它的机器上运行的页面，即使有，我可以用它来提交测试值，以服务的形式。但是在远程计算机上，它隐藏的形式，给出了如上所见的消息。

I created a Web Service in .Net and so the address of the service file has a nifty auto generated explanation about how it works. When I run the page from the machine it's hosted on it even has a form that I can use to submit test values to the service. However on remote machines it hides the form and gives the message as seen above.

有一个点呢？我见过的其他站点调用，如果你问我这个更安全，但任何人都可以创建自己的形式很容易使这只不过是一个滋扰。

Is there a point to this? I've seen other sites call this "more secure" but anyone could create their own forms easily making this nothing more than a nuisance if you ask me.

推荐答案

如果您要发布的元数据，这是一个公开/不安全的Web服务，你是正确的，这将是很容易对任何人产生一个简单的客户端，以锤离开在您的Web服务。在这种情况下，仅具有在本地机器上生成的Web客户机似乎像一个滋扰

If you are publishing metadata and it's a public/unsecured web service, you are right, it would be easy enough for anyone to generate a simple client to hammer away at your web service. In that case, having the web client only generated on the local machine does seem like a nuisance.

如果你的服务是私人的，安全的，但是，这将是一个巨大的安全漏洞，使任何人都与服务器和服务中身份验证的客户端的名称用来潜在地访问您的数据和做各种危害。

If your service is private and secured, however, it would be a huge security hole, giving anyone with the name of the server and service an authenticated client to use to potentially access your data and do all kinds of harm.

我想生成用户界面ASMX Web服务只在服务器上的政策本身是企图提供一些不错的工具，同时消除了意外的安全漏洞。 WCF已经在任何情况下，废除了这一点，就可以生成客户端只有在元数据的发布，他们需要实现以访问服务的正确的安全性。

I imagine the policy of generating the UI for ASMX Web services only on the server itself was an attempt to provide some nice tooling while eliminating accidental security holes. WCF has done away with this in any case, you can generate clients only if the metadata is published, and they need to implement the correct security in order to access the services.

这篇关于＆QUOT;测试窗体只能用于来自本地计算机的请求＆QUOT。的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！