Till now it always have been required (and it's present as #1 in my WS review cheatsheet) to verify that validate_parameters() is present it the execution of the function and that, only validated params are used along the function body.

But here, while reviewing a function fix eagle-eye dmonllao realised that webservice_base_server->execute() method always perform a validate_parameters() call before invoking the function.

So the question is... why have been always requiring the explicit validation since the born of the webservices when it's already performed automagically? Is there any case where that's not happening?

Welcome, ciao