[jira] Updated: (SANTUARIO-161) if base64 is used after xpath expression it should extract only text nodes

["Scott Cantor (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SANTUARIO-161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated SANTUARIO-161:
-----------------------------------

             Priority: Minor  (was: Major)
    Affects Version/s: C++ 1.5.1
             Assignee:     (was: XML Security Developers Mailing List)

> if base64 is used after xpath expression it should extract only text nodes
> --------------------------------------------------------------------------
>
>                 Key: SANTUARIO-161
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-161
>             Project: Santuario
>          Issue Type: Bug
>          Components: C++
>    Affects Versions: C++ 1.5.1
>         Environment: Operating System: Windows XP
> Platform: PC
>            Reporter: Matej Spiller-Muys
>            Priority: Minor
>
> DSIGTransformBase64.cpp function appendTransformer does not extract text() nodes if input is xpath transformation
> if (input->getLastTxfm()->getNodeType() != TXFMBase::DOM_NODE_XPATH_NODESET) then it adds self::text() xpath transformation.
> However even if input is already xpath_nodeset it should have self::text() transformation applied.
> from standard:
> This transform requires an octet stream for input. If an XPath node-set (or sufficiently functional alternative) is given as input, then it is converted to an octet stream by performing operations logically equivalent to 1) applying an XPath transform with expression self::text(), then 2) taking the string-value of the node-set. Thus, if an XML element is identified by a barename XPointer in the Reference URI, and its content consists solely of base64 encoded character data, then this transform automatically strips away the start and end tags of the identified element and any of its descendant elements as well as any descendant comments and processing instructions. The output of this transform is an octet stream.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.