[SANTUARIO-523] XMLSecurityStreamReader ignores information in XML document declaration

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Java 2.1.4
• Fix Version/s: Java 2.2.0, Java 2.1.5
• Component/s: Java
• Assignee: Colm O hEigeartaigh
• Reporter: Peter De Maeyer
• Created: 30/Jan/20 07:57
• Updated: 13/Mar/20 12:26
• Resolved: 14/Feb/20 16:53

Description

XMLSecurityStreamReader ignores information such as version, character encoding scheme and standalone-ness in the XML document declaration.
The implementation always returns null/false, indicating the defaults version "1.0", character encoding scheme "UTF-8", even if the XML document specifies something else.

The following example will have the wrong version, encoding and standalone-ness:

<?xml version='1.1' encoding='ISO-8859-1' standalone='yes'?>
</Document>