cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CXF-6209) Bug in processing Signed/Encrypted Elements policies with multiple XPaths
Date Tue, 20 Jan 2015 14:58:34 GMT
Colm O hEigeartaigh created CXF-6209:
----------------------------------------

             Summary: Bug in processing Signed/Encrypted Elements policies with multiple XPaths
                 Key: CXF-6209
                 URL: https://issues.apache.org/jira/browse/CXF-6209
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 2.7.14, 3.0.3
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
            Priority: Minor
             Fix For: 3.0.4, 2.7.15



There is a bug in the WS-SecurityPolicy layer in CXF when matching a request message against
a Signed/Encrypted Elements security policy with multiple XPath expressions. The namespace/prefixes
are only read from the first XPath policy, meaning that if the second or subsequent policy
uses a different prefix that isn't in scope, the policy validation will fail.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message