OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

wss message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [wss] Recently discover WSS security threat


Rich Salz wrote:
> In other words, you can do it with a simple XPath transform, not the more
> complicated XPath2 transform. Right?

I agree. It seems the simple XPath transform is quite usable here. If
the added constraint be that the XPath expression is absolute (which
it almost has to be to avoid these attacks, anyway), there is less risk
of implementation errors, too.

Hans


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]