RE: [wss] Recently discover WSS security threat

[Michael McIntosh <mikemci@us.ibm.com>]

Rich Salz <rsalz@datapower.com> wrote on 05/27/2005 08:59:38 PM:

> > I think you need a leading slash:
> > //soap:Envelope/S:Header/*[@wsu:id='123']
> 
> Doesn't // mean anywhere?

Yes. I misread the spec.

> 
> > I like this better: 
//soap:Envelope/soap:Header/theElement[@wsu:Id="123"]
> 
> Except for the //, you're right, that's better; it's more clear and
> probably more efficient.
> 
>    /r$
> 
> -- 
> Rich Salz                  Chief Security Architect
> DataPower Technology       http://www.datapower.com
> XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
>