There are two possible solutions −
Filter out all HTTP POST requests that set their content type to text/xml.
Another alternative is to filter the SOAPAction HTTP header attribute.
Your experience on this site will be improved by allowing cookies. Read Cookie Policy