Skip to content

Latest commit

 

History

History
35 lines (24 loc) · 925 Bytes

the-replace-method-in-odata-urls-is-disabled-by-default.md

File metadata and controls

35 lines (24 loc) · 925 Bytes
Raw

The Replace method in OData URLs is disabled by default

Scope

Edge

Version Introduced

4.5

Source Analyzer Status

Available

Change Description

Beginning in the .NET Framework 4.5, the Replace method in OData URLs is disabled by default. When OData Replace is disabled (now by default), any user requests including replace functions (which are uncommon) will fail.

  • Quirked
  • Build-time break

Recommended Action

If the replace method is required (which is uncommon), it can be re-enabled through a config settings (xref:System.Data.Services.Configuration.DataServicesFeaturesSection.ReplaceFunction?displayProperty=name). However, an enabled replace method can open security vulnerabilities and should only be used after careful review.

Affected APIs

  • T:System.Data.Services.DataService`1

Category

Windows Communication Foundation (WCF)