class SoapTagger
- SoapTagger
- Tagger
- Reference
- Object
Overview
Flags SOAP / XML web-service endpoints. SOAP surfaces warrant XML- specific review (XXE, SOAP-action spoofing, WS-Security handling) that differs from a typical REST/JSON route, so calling them out helps a reviewer pick the right lens.
Defined in:
tagger/taggers/soap.crConstant Summary
-
HEADER_NAMES =
Set {"soapaction"} -
Request headers that mark a SOAP call.
SOAPActionis mandatory in SOAP 1.1;Content-Type: application/soap+xmlis the SOAP 1.2 marker. -
URL_MARKERS =
["?wsdl", ".wsdl", ".asmx"] -
Unambiguous SOAP / XML-web-service URL markers: WSDL documents and the classic ASP.NET (
.asmx) handler. A baresoappath segment is deliberately not matched — it collides with non-SOAP routes (e.g. a/products/soapstore listing).