[SANTUARIO-347] StAX - Review / Refactor XMLSecurityInputProcessor class

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Java 2.0.0
• Component/s: Java
• Security Level: Public (Public issues, viewable by everyone)
• Assignee: Colm O hEigeartaigh
• Reporter: Marc Giger
• Created: 02/Oct/12 16:33
• Updated: 01/May/14 14:18
• Resolved: 08/Oct/12 18:59

Description

The analysis of the performance tests revealed a increasing memory consumption during decryption.

I identified the cause for it in the XMLSecurityInputProcessor class. The XMLSecurityInputProcessor
buffers the whole XML instead of streaming it through the chain.

Additionally, it is not possible to decrypt and verify a signature at the same time. Maybe we are able to offer
this functionality? I don't know if it's possible...