You are viewing a plain text version of this content. The canonical link for it is here.

Posted to fx-dev@ws.apache.org by "Fred Dushin (JIRA)" <ji...@apache.org> on 2006/07/11 17:16:29 UTC

[jira] Created: (WSS-48) EnvelopeIdResolver does not use namespace-sensitive queries

EnvelopeIdResolver does not use namespace-sensitive queries
-----------------------------------------------------------

         Key: WSS-48
         URL: http://issues.apache.org/jira/browse/WSS-48
     Project: WSS4J
        Type: Bug

    Reporter: Fred Dushin
 Assigned to: Davanum Srinivas 


The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname.  This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org

[jira] Commented: (WSS-48) EnvelopeIdResolver does not use namespace-sensitive queries

Posted by "Dennis Sosnoski (JIRA)" <ji...@apache.org>.

    [ http://issues.apache.org/jira/browse/WSS-48?page=comments#action_12429353 ] 
            
Dennis Sosnoski commented on WSS-48:
------------------------------------

I also ran into this, and fixed it independently. I was surprised that this has apparently not been tested, since it seems like you'd run into this with any of the standard examples from the WSS documentation.

> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
>                 Key: WSS-48
>                 URL: http://issues.apache.org/jira/browse/WSS-48
>             Project: WSS4J
>          Issue Type: Bug
>            Reporter: Fred Dushin
>         Assigned To: Davanum Srinivas
>         Attachments: EnvelopeIdResolver.patch
>
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname.  This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org

[jira] Resolved: (WSS-48) EnvelopeIdResolver does not use namespace-sensitive queries

Posted by "Ruchith Udayanga Fernando (JIRA)" <ji...@apache.org>.

     [ http://issues.apache.org/jira/browse/WSS-48?page=all ]

Ruchith Udayanga Fernando resolved WSS-48.
------------------------------------------

    Resolution: Fixed

Applied patch from Fred Dushin. SVN revision : 433201

Thanks,
Ruchith

> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
>                 Key: WSS-48
>                 URL: http://issues.apache.org/jira/browse/WSS-48
>             Project: WSS4J
>          Issue Type: Bug
>            Reporter: Fred Dushin
>         Assigned To: Davanum Srinivas
>         Attachments: EnvelopeIdResolver.patch
>
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname.  This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org

[jira] Updated: (WSS-48) EnvelopeIdResolver does not use namespace-sensitive queries

Posted by "Fred Dushin (JIRA)" <ji...@apache.org>.

     [ http://issues.apache.org/jira/browse/WSS-48?page=all ]

Fred Dushin updated WSS-48:
---------------------------

    Attachment: EnvelopeIdResolver.patch

patch file for EntityResolver.  This patch is based off tags/1_5_0.

> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
>          Key: WSS-48
>          URL: http://issues.apache.org/jira/browse/WSS-48
>      Project: WSS4J
>         Type: Bug

>     Reporter: Fred Dushin
>     Assignee: Davanum Srinivas
>  Attachments: EnvelopeIdResolver.patch
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname.  This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org