Ted,
Can you please let us know if Xerces dev team will pick this patch up? and when? -
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25853
thanks,
dims
--- Werner Dittmann <[EMAIL PROTECTED]> wrote:
> Hi,
>
> to test the content encryption of XMLCipher I modified the test case of
> XML enc
Had a quick check on the bug report. Before making a decision as to the
correct way forward, do we know if the Xerces-J people are going to
incorporate this fix in the next release?
Cheers,
Berin
Werner Dittmann wrote:
Hi,
to test the content encryption of XMLCipher I modified the tes
Werner Dittmann wrote:
IMO, for encryption serialization CDATA shall be serialized as CDATA element
without Entity conversion. Otherwise it may give problems when we first sign
that
element, then encrypt it. In addition CDATA implies a "preserve space"
behavior.
Is that true for standard Text nod
At 9:47 PM +0100 1/3/04, Werner Dittmann wrote:
Dims, all,
just looked at CanonicalizerBase and did a quick test. Unfortunatly it also
handles CDATA in a wrong way - it handles CDATA like standard Text
nodes, i.e. C14nBase converts all special chars into Entities and serialize
CDATA as standard te
Werner Dittmann wrote:
Dims, all,
just looked at CanonicalizerBase and did a quick test. Unfortunatly it also
handles CDATA in a wrong way - it handles CDATA like standard Text
nodes, i.e. C14nBase converts all special chars into Entities and serialize
CDATA as standard text without the "[!CDATA[.
Dims, all,
just looked at CanonicalizerBase and did a quick test. Unfortunatly it also
handles CDATA in a wrong way - it handles CDATA like standard Text
nodes, i.e. C14nBase converts all special chars into Entities and serialize
CDATA as standard text without the "[!CDATA[]]" sequence. I don'
Werner,
did you see org.apache.xml.security.c14n.implementations.CanonicalizerBase?
-- dims
--- Davanum Srinivas <[EMAIL PROTECTED]> wrote:
> Werner,
>
> my 2 cents, let's (make a copy of XMLSerializer) or (write an equivalent) that can
> be maintained
> as part of xml-security (just like we
Werner,
my 2 cents, let's (make a copy of XMLSerializer) or (write an equivalent) that can be
maintained
as part of xml-security (just like we have DOM2Writer in axis). also, i grepped for
XMLSerializer
and it seems to be used only in cipher code and some junit tests. so should be easy to
get r
Erwin, all,
well, I didn't modify any code that is relevant for Signature. It may
relevant
for Signature if Signature code uses the XMLSerializer of Xerces (haven't
checked that). However, I ran several test cases that also use Signature
(I'm working on WSS4J that does Signature and encryption) an