TEC Workbook - IBM

2.7 Stylesheet Caching
IBM Software
XSL stylesheets are compiled and then cached to improve performance. Previously you configured your
processing rule to transform the request XML document against productTransform.xsl. The stylesheet
was fetched from a remote server, compiled, and then cached. You can verify this by checking the status
of the document cache.
__1. In the left hand navigation pane, under the Status menu, scroll down to find the XML Processing
section, and click on Stylesheet Cache.
In the cached stylesheets column, you can see the number of stylesheets that have been compiled and
cached (this value also includes some system stylesheets).
__2. In the XML Processing section, click on Stylesheet Status
The Stylesheet Status page shows you all of the stylesheets that have been compiled and cached. Since
schema documents (XSD) are compiled like stylesheets, they show up in this list too.
2.8 Implicit XML Threat Protection
Services that are configured to receive XML messages provide a wide array of additional XML threat
protection.
2.8.1 Malformed XML Content Detection
In this next step, you’ll post malformed XML to your service
__1. In soapUI, click on the Request tab.
__2. Load the request body with file c:\labs\requests\malformed.xml.
Notice that the closing tag is missing the leading slash resulting in the XML to be
malformed. Don’t correct the error.
__3. Click the green submit button to POST the malformed message to ProductServiceProxy. Again,
you should receive a generic SOAP fault. Click the View Log link at the top of the Multi-Protocol
Gateway configuration page and notice the error message pertaining to the mismatched tag.
2.8.2 XML Denial of Service (XDoS)
WebSphere DataPower appliances can protect Web services against both single message denial of
service (XDoS) and multiple message denial of service (MMXDoS) attacks.
Single message XDoS attacks may have any combination of the following characteristics:
● Jumbo payloads – Sending a very large XML message to exhaust memory and CPU on
the target system.
● Recursive elements – XML messages that can be used to force recursive entity expansion
(or other repeated processing) to exhaust server resources
Lab 2 - Working with XML Page 49