RE: [wss] Recently discover WSS security threat

[Rich Salz <rsalz@datapower.com>]

> I think you need a leading slash:
> //soap:Envelope/S:Header/*[@wsu:id='123']

Doesn't // mean anywhere?

> I like this better: //soap:Envelope/soap:Header/theElement[@wsu:Id="123"]

Except for the //, you're right, that's better; it's more clear and
probably more efficient.

	/r$

-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html