santuario-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ling Xiaohan" <lin...@cn.fujitsu.com>
Subject Re: Reference URI format !
Date Tue, 11 Nov 2008 09:18:41 GMT
No, the signature verification is done by another program, URL encode may 
confuse it when dereferencing
to local system.
However, I will try. Thanks.
  ----- Original Message ----- 

  Did you URL encode before passing the String form of the URI in to the 
Reference?  I pass my URIs as URI objects until the last moment, so that I 
don't have to chase down encoded/unencoded data paths through the code. 
Saves me a lot of headaches and some potential security holes.

  -Jason

  (I will never understand why both xmlsec and the Java dsig API have so 
many method arguments called "String uri".  You are all certainly welcome to 
try to explain, but I will simply laugh at you if you do.  I may point at 
the same time.)




  On Tue, Nov 11, 2008 at 12:13 AM, Ling Xiaohan <lingxh@cn.fujitsu.com> 
wrote:

    Hi,

      URI attribute of <Reference> tag can be set to a relative path in 
local file
    system, but when the path contains blank space, it seems this 
<Reference>
    tag coulde not be created by XMLSignatureFactory.newReference method.

    Ex.,
      <Reference URI="My document/test.txt">
    where there is a space in "My document".

    Is this a limit?

    Thanks.
    ----------------------------------------------------------------------------





  -- 
  - Jason

Mime
View raw message