You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@santuario.apache.org by "Scott Cantor (JIRA)" <ji...@apache.org> on 2017/09/20 16:47:00 UTC

[jira] [Resolved] (SANTUARIO-476) Change default behavior for inferring attribute IDness by name

     [ https://issues.apache.org/jira/browse/SANTUARIO-476?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved SANTUARIO-476.
------------------------------------
    Resolution: Fixed

r1809052

Bug found in the DSIGSignature::load method that was skipping the Object elements and so not loading them getting the ID established as intended.

> Change default behavior for inferring attribute IDness by name
> --------------------------------------------------------------
>
>                 Key: SANTUARIO-476
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-476
>             Project: Santuario
>          Issue Type: Improvement
>          Components: C++
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>             Fix For: C++ 2.0.0
>
>
> With the 2.0 bump, it's time to change the default setting so the library doesn't assume that the name of an XML attribute implies that it's an ID. I'll leave the existing built-in use of "ID" and "Id" as names to check if the flag is turned back on, but the flag will be off by default since this is inherently insecure behavior.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)