[SANTUARIO-277] URI references using HTTPS protocol are not properly handled by the XSECURIResolverGenericWin32::resolveURI method.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: C++ 1.6.0, C++ 1.6.1, C++ 1.7.0, C++ 1.7.1, C++ 1.7.2
• Fix Version/s: C++ 2.0.0
• Component/s: C++
• Security Level: Public (Public issues, viewable by everyone)
• Environment: MS Windows
• Assignee: Scott Cantor
• Reporter: Michal Bystrianin
• Created: 29/May/11 19:42
• Updated: 27/Jun/18 15:28
• Resolved: 27/Dec/17 16:46

Description

HTTPS protocol used in URI reference isn't recognized as valid URI scheme. Note: this bug exists also in XSECURIResolverGenericUnix class.
Simple possible solution: declare new pattern for this scheme

static const XMLCh gHttpsScheme[] =

{ chLatin_h, chLatin_t, chLatin_t, chLatin_p, chLatin_s, chNull }

;

and replace two lines at end of the "resolveURI" method by code as below:

// Is the scheme a HTTP or HTTPS?
if (!XMLString::compareIString(xmluri->getScheme(), gHttpScheme) ||
!XMLString::compareIString(xmluri->getScheme(), gHttpsScheme)) {