title: Are SOAP web services vulnerable to CSRF attacks?
body: <p>We have a web application in Spring MVC and also the web services are implemented using Spring Web Service. They are SOAP based. 
  I have couple of queries in CSRF front.</p>
  
  <ol>
  <li>If there is a CSRF vulnerability for SOAP based web services? I dont think it should be as SOAP is XML. But still not sure if I am missing out on any thing.</li>
  <li>If there is CSRF vulnerability for SOAP based web service, then how can a incoming request be validated? As for CSRF the token is once generated by the server and then the client (usually browser) send that token again to the server. How is this possible with web service calls.</li>
  </ol>
  
  <p>Any inputs on this will be a help. Thanks in advance.</p>