You are viewing a plain text version of this content. The canonical link for it is here.
Posted to wss4j-dev@ws.apache.org by "Fred Dushin (JIRA)" <ji...@apache.org> on 2006/07/11 17:16:29 UTC
[jira] Created: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
EnvelopeIdResolver does not use namespace-sensitive queries
-----------------------------------------------------------
Key: WSS-48
URL: http://issues.apache.org/jira/browse/WSS-48
Project: WSS4J
Type: Bug
Reporter: Fred Dushin
Assigned to: Davanum Srinivas
The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
Posted by "Dennis Sosnoski (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-48?page=comments#action_12429353 ]
Dennis Sosnoski commented on WSS-48:
------------------------------------
I also ran into this, and fixed it independently. I was surprised that this has apparently not been tested, since it seems like you'd run into this with any of the standard examples from the WSS documentation.
> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
> Key: WSS-48
> URL: http://issues.apache.org/jira/browse/WSS-48
> Project: WSS4J
> Issue Type: Bug
> Reporter: Fred Dushin
> Assigned To: Davanum Srinivas
> Attachments: EnvelopeIdResolver.patch
>
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Resolved: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
Posted by "Ruchith Udayanga Fernando (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-48?page=all ]
Ruchith Udayanga Fernando resolved WSS-48.
------------------------------------------
Resolution: Fixed
Applied patch from Fred Dushin. SVN revision : 433201
Thanks,
Ruchith
> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
> Key: WSS-48
> URL: http://issues.apache.org/jira/browse/WSS-48
> Project: WSS4J
> Issue Type: Bug
> Reporter: Fred Dushin
> Assigned To: Davanum Srinivas
> Attachments: EnvelopeIdResolver.patch
>
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Updated: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
Posted by "Fred Dushin (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-48?page=all ]
Fred Dushin updated WSS-48:
---------------------------
Attachment: EnvelopeIdResolver.patch
patch file for EntityResolver. This patch is based off tags/1_5_0.
> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
> Key: WSS-48
> URL: http://issues.apache.org/jira/browse/WSS-48
> Project: WSS4J
> Type: Bug
> Reporter: Fred Dushin
> Assignee: Davanum Srinivas
> Attachments: EnvelopeIdResolver.patch
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Updated: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
Posted by "Fred Dushin (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-48?page=all ]
Fred Dushin updated WSS-48:
---------------------------
Attachment: EnvelopeIdResolver.patch
patch file for EntityResolver. This patch is based off tags/1_5_0.
> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
> Key: WSS-48
> URL: http://issues.apache.org/jira/browse/WSS-48
> Project: WSS4J
> Type: Bug
> Reporter: Fred Dushin
> Assignee: Davanum Srinivas
> Attachments: EnvelopeIdResolver.patch
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
Posted by "Dennis Sosnoski (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-48?page=comments#action_12429353 ]
Dennis Sosnoski commented on WSS-48:
------------------------------------
I also ran into this, and fixed it independently. I was surprised that this has apparently not been tested, since it seems like you'd run into this with any of the standard examples from the WSS documentation.
> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
> Key: WSS-48
> URL: http://issues.apache.org/jira/browse/WSS-48
> Project: WSS4J
> Issue Type: Bug
> Reporter: Fred Dushin
> Assigned To: Davanum Srinivas
> Attachments: EnvelopeIdResolver.patch
>
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Resolved: (WSS-48) EnvelopeIdResolver does not use
namespace-sensitive queries
Posted by "Ruchith Udayanga Fernando (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-48?page=all ]
Ruchith Udayanga Fernando resolved WSS-48.
------------------------------------------
Resolution: Fixed
Applied patch from Fred Dushin. SVN revision : 433201
Thanks,
Ruchith
> EnvelopeIdResolver does not use namespace-sensitive queries
> -----------------------------------------------------------
>
> Key: WSS-48
> URL: http://issues.apache.org/jira/browse/WSS-48
> Project: WSS4J
> Issue Type: Bug
> Reporter: Fred Dushin
> Assigned To: Davanum Srinivas
> Attachments: EnvelopeIdResolver.patch
>
>
> The EnvelopeIdResolver searched for a wsi:id in a cryptographically protected SOAPElement, and then calls the DOM Level1 getAttribute call on the element, providing only the localname of the wsu:Id qname. This causes some Saaj implementations to fail to locate the wsu:Id attribute, since it is namespace-qualified.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org