-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fixing SignedXml.CheckSignature for enveloped signature with #xpointer(/)
Reference
#95404
Conversation
Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones Issue DetailsStarted poking at #95390
|
#xpointer(/)
Reference#xpointer(/)
Reference
...libraries/System.Security.Cryptography.Xml/src/System/Security/Cryptography/Xml/Reference.cs
Outdated
Show resolved
Hide resolved
...libraries/System.Security.Cryptography.Xml/src/System/Security/Cryptography/Xml/Reference.cs
Outdated
Show resolved
Hide resolved
...libraries/System.Security.Cryptography.Xml/src/System/Security/Cryptography/Xml/Reference.cs
Show resolved
Hide resolved
...libraries/System.Security.Cryptography.Xml/src/System/Security/Cryptography/Xml/Reference.cs
Show resolved
Hide resolved
…rity/Cryptography/Xml/Reference.cs Co-authored-by: Kevin Jones <vcsjones@github.com>
…rity/Cryptography/Xml/Reference.cs Co-authored-by: Kevin Jones <vcsjones@github.com>
src/libraries/System.Security.Cryptography.Xml/tests/SignedXmlTest.cs
Outdated
Show resolved
Hide resolved
...libraries/System.Security.Cryptography.Xml/src/System/Security/Cryptography/Xml/Reference.cs
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm slightly displeased at how the null URI got included in this change sort of just-because (i.e. it wasn't part of the original problem description); but there's not really reason to break it apart at this point. (Except that the PR / final commit needs a better title.)
_uri
values that are non-empty and don't start with #
will now take a different path through the code; but it ends up having the same effect.
Adds tests for #95390 and implements a fix.