1

我写下面的代码在soap webservices中发布请求：

NSString *newstr = [[NSString alloc] initWithFormat:@"%@/Enki_UpperWs.asmx",[WebServices RequestURL]];
NSString *soapMsg = [[NSString alloc] initWithFormat:@"<?xml version=\"1.0\" encoding=\"utf-8\"?>\n"
                         "<soap:Envelope xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\">\n"
                         "<soap:Body>\n"
                         "<Generate_Facility_List xmlns=\"http://tempuri.org/\">\n"
                         "<UserID>%d</UserID>\n"
                         "<LicenseKey>%d</LicenseKey>\n"
                         "<token>%@</token>\n"
                         "</Generate_Facility_List>\n"
                         "</soap:Body>\n"
                         "</soap:Envelope>",UserId,OfficeKey,strUserToken];

    soapMsg=[self getcodeforkeys:soapMsg];

    NSString *msgLength = [NSString stringWithFormat:@"%i", [soapMsg length]];
    NSURL *myURL = [[NSURL alloc] initWithString:[newstr stringByAddingPercentEscapesUsingEncoding:NSUTF8StringEncoding]];
    NSMutableURLRequest *myRequest = [NSMutableURLRequest requestWithURL:myURL cachePolicy:NSURLCacheStorageAllowed timeoutInterval:500];
    [myRequest setValue:@"text/xml; charset=UTF-8" forHTTPHeaderField:@"Content-type"];
    [myRequest addValue:@"http://tempuri.org/Generate_Facility_List" forHTTPHeaderField:@"SOAPAction"];
    [myRequest addValue: msgLength forHTTPHeaderField:@"Content-Length"];
    [myRequest setHTTPMethod:@"POST"];
    [myRequest setHTTPBody:[soapMsg dataUsingEncoding:NSUTF8StringEncoding]];
    NSURLConnection *con = [[NSURLConnection alloc]initWithRequest:myRequest delegate:self];
    self.connection = con;
    [con release];
    [myURL release];
    [newstr release];
    [soapMsg release];
    return [self doParsing];

但是，如果任何参数具有特殊字符，如 < Or > Or & or ' or " 并且如果我使用以下函数替换它：

-(NSString*)getcodeforkeys:(NSString*)str_code{
    str_code = [str_code stringByReplacingOccurrencesOfString:@"&" withString:@"&amp;"];
    str_code = [str_code stringByReplacingOccurrencesOfString:@"<" withString:@"&lt;"];
    str_code = [str_code stringByReplacingOccurrencesOfString:@">" withString:@"&gt;"];
    str_code = [str_code stringByReplacingOccurrencesOfString:@"'" withString:@"&apos;"];
    str_code = [str_code stringByReplacingOccurrencesOfString:@"\"" withString:@"&quot;"];
    return str_code;
}

它也替换了 XML 字符..由于我无法以 XML 格式发布请求。我只需要替换传递的对象并保持 XML 格式不变，但是如何？？？

例如，如果我将 strUserToken 作为 @"testing<&>" 传递，那么它将替换其特殊字符，但不会替换 XML 字符串。

任何人都可以帮忙吗？

4

1 回答 1

1

XML 验证：

针对 DTD 验证的 XML 是“有效的”XML。

您可能想尝试其中一种方法来确保最终的 XML 有效：

  1. 使用CDATA部分作为文本内容。
  2. 单独转义文本内容（即UserId,OfficeKey在strUserToken您的情况下）。

1.

NSString *soapMsg = [[NSString alloc] initWithFormat:@"<?xml version=\"1.0\" encoding=\"utf-8\"?>\n"
                         "<soap:Envelope xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\">\n"
                         "<soap:Body>\n"
                         "<Generate_Facility_List xmlns=\"http://tempuri.org/\">\n"
                         "<UserID><![CDATA[%d]]></UserID>\n"
                         "<LicenseKey><![CDATA[%d]]></LicenseKey>\n"
                         "<token><![CDATA[%@]]></token>\n"
                         "</Generate_Facility_List>\n"
                         "</soap:Body>\n"
                         "</soap:Envelope>",UserId,OfficeKey,strUserToken]; // the text inside CDATA is not parsed as a part of XML, it might have special characters unescaped. The parser should support CDATA though

// do not escape complete document - remove the line soapMsg=[self getcodeforkeys:soapMsg];

2.

NSString *soapMsg = [[NSString alloc] initWithFormat:@"<?xml version=\"1.0\" encoding=\"utf-8\"?>\n"
                         "<soap:Envelope xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\">\n"
                         "<soap:Body>\n"
                         "<Generate_Facility_List xmlns=\"http://tempuri.org/\">\n"
                         "<UserID>%d</UserID>\n"
                         "<LicenseKey>%d</LicenseKey>\n"
                         "<token>%@</token>\n"
                         "</Generate_Facility_List>\n"
                         "</soap:Body>\n"
                         "</soap:Envelope>",
                         [self getcodeforkeys:UserId],
                         [self getcodeforkeys:OfficeKey],
                         [self getcodeforkeys:strUserToken]]; // escape text separately

// do not escape complete document - remove the line soapMsg=[self getcodeforkeys:soapMsg];
于 2013-02-27T09:39:00.473 回答