You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2015/01/20 17:07:35 UTC

[jira] [Resolved] (CXF-6209) Bug in processing Signed/Encrypted Elements policies with multiple XPaths

     [ https://issues.apache.org/jira/browse/CXF-6209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-6209.
--------------------------------------
    Resolution: Fixed

> Bug in processing Signed/Encrypted Elements policies with multiple XPaths
> -------------------------------------------------------------------------
>
>                 Key: CXF-6209
>                 URL: https://issues.apache.org/jira/browse/CXF-6209
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 3.0.3, 2.7.14
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>            Priority: Minor
>             Fix For: 3.0.4, 2.7.15
>
>
> There is a bug in the WS-SecurityPolicy layer in CXF when matching a request message against a Signed/Encrypted Elements security policy with multiple XPath expressions. The namespace/prefixes are only read from the first XPath policy, meaning that if the second or subsequent policy uses a different prefix that isn't in scope, the policy validation will fail.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)