Major Description
Xpath is calculated using element still attached to EncryptedHeader parent. The clone, which is attached to soap header should be used instead. As a result, rampart 1.5-SNAPSHOT fails to validate decrypted parts within PolicyBasedResultsValidator. Simple one line fix:
Within ReferenceListProcessor.decryptEncryptedData() method, the following line:
dataRef.setXpath(getXPath(decryptedHeader));
should be:
dataRef.setXpath(getXPath(decryptedHeaderClone));