2017-04-18 07:52:04 +08:00
|
|
|
## The Replace method in OData URLs is disabled by default
|
2017-04-06 04:52:19 +08:00
|
|
|
|
|
|
|
|
### Scope
|
|
|
|
|
Edge
|
|
|
|
|
|
|
|
|
|
### Version Introduced
|
|
|
|
|
4.5
|
|
|
|
|
|
|
|
|
|
### Source Analyzer Status
|
|
|
|
|
Available
|
|
|
|
|
|
|
|
|
|
### Change Description
|
2017-04-21 02:19:05 +08:00
|
|
|
|
|
|
|
|
Beginning in the .NET Framework 4.5, the Replace method in OData URLs is
|
|
|
|
|
disabled by default. When OData Replace is disabled (now by default), any user
|
|
|
|
|
requests including replace functions (which are uncommon) will fail.
|
2017-04-06 04:52:19 +08:00
|
|
|
|
|
|
|
|
- [ ] Quirked
|
|
|
|
|
- [ ] Build-time break
|
|
|
|
|
|
|
|
|
|
### Recommended Action
|
2017-04-21 02:19:05 +08:00
|
|
|
|
|
|
|
|
If the replace method is required (which is uncommon), it can be re-enabled
|
|
|
|
|
through a config settings
|
|
|
|
|
(<xref:System.Data.Services.Configuration.DataServicesFeaturesSection.ReplaceFunction?displayProperty=name>).
|
|
|
|
|
However, an enabled replace method can open security vulnerabilities and should
|
|
|
|
|
only be used after careful review.
|
2017-04-06 04:52:19 +08:00
|
|
|
|
|
|
|
|
### Affected APIs
|
|
|
|
|
* ``T:System.Data.Services.DataService`1``
|
|
|
|
|
|
|
|
|
|
### Category
|
|
|
|
|
Windows Communication Foundation (WCF)
|
|
|
|
|
|
2017-04-18 07:52:04 +08:00
|
|
|
<!-- breaking change id: 29 -->
|
