Closed GoogleCodeExporter closed 9 years ago
Is this a real concern? The only reference to setIdAttribute I saw is in
DOMCryptoContext. Can it be that this is only in programmatic tests and we can
rewrite them?
Original comment by anli.shu...@gmail.com
on 14 May 2012 at 3:08
And even DOM's setId has the option of throwing
DOMException - NO_MODIFICATION_ALLOWED_ERR: Raised if this node is readonly.
http://docs.oracle.com/javase/6/docs/api/org/w3c/dom/Element.html#setIdAttribute
(java.lang.String,%20boolean)
Original comment by anli.shu...@gmail.com
on 14 May 2012 at 3:17
Yes, definitely a real concern. The "mutability" question is already a given -
if you're signing/encrypting, then the document already has to be mutable, so
it would not be consistent to reject this request.
I implemented the changes in GenXDM, and then applied the changes in Santuario,
and I found at least fifteen hits on the method that I had to add. Which code
base did you search through?
I've filed
http://code.google.com/a/apache-extras.org/p/santuario-genxdm/issues/detail?id=1
8 to see if it is possible to update the Santuario project to eliminate the
need to apply this mutation, but that's potentially a big change.
Original comment by eric%tib...@gtempaccount.com
on 14 May 2012 at 3:41
Wrong search... It seems that the settings are legitimate though: they're on
new signature elements being created in previous steps... As for efficiency
we're handling only one or two ids per signature...
Original comment by anli.shu...@gmail.com
on 14 May 2012 at 8:03
Fixed at r327
Original comment by eric%tib...@gtempaccount.com
on 16 May 2012 at 12:36
Original issue reported on code.google.com by
eric%tib...@gtempaccount.com
on 16 Apr 2012 at 3:29