Hi,
In WSSecurityEngine class of wss4j, the handleReferenceList(Element, Callback) is private method. Can it be made public as other handleXXX(...) methods such as handleEncryptedKey(Element, Callback) method? There is really no special reason that ReferenceList element should be treately differently than other immediate childs of wsse:Security header. We need this in order to directly control which elements should be decrypted instead of relying on processSecurityHeader() methods of WSSecurityEngine.
Thanks,
Jinsong Lin
