[CXF-6209] Bug in processing Signed/Encrypted Elements policies with multiple XPaths

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.3, 2.7.14
• Fix Version/s: 3.0.4, 2.7.15
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 20/Jan/15 14:58
• Updated: 16/Feb/15 16:09
• Resolved: 20/Jan/15 16:07

Description

There is a bug in the WS-SecurityPolicy layer in CXF when matching a request message against a Signed/Encrypted Elements security policy with multiple XPath expressions. The namespace/prefixes are only read from the first XPath policy, meaning that if the second or subsequent policy uses a different prefix that isn't in scope, the policy validation will fail.