Repository: cxf Updated Branches: refs/heads/master e46b89691 -> 253f87685
Disable WS-Security schema validation by default Project: http://git-wip-us.apache.org/repos/asf/cxf/repo Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/253f8768 Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/253f8768 Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/253f8768 Branch: refs/heads/master Commit: 253f87685ae7d048b815937c158be9f4229baf7a Parents: e46b896 Author: Colm O hEigeartaigh <[email protected]> Authored: Wed Apr 16 17:50:16 2014 +0100 Committer: Colm O hEigeartaigh <[email protected]> Committed: Wed Apr 16 17:50:33 2014 +0100 ---------------------------------------------------------------------- .../cxf/ws/security/wss4j/AbstractWSS4JStaxInterceptor.java | 4 ++++ 1 file changed, 4 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cxf/blob/253f8768/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/AbstractWSS4JStaxInterceptor.java ---------------------------------------------------------------------- diff --git a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/AbstractWSS4JStaxInterceptor.java b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/AbstractWSS4JStaxInterceptor.java index c76a13e..68c13b3 100644 --- a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/AbstractWSS4JStaxInterceptor.java +++ b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/AbstractWSS4JStaxInterceptor.java @@ -171,6 +171,10 @@ public abstract class AbstractWSS4JStaxInterceptor implements SoapInterceptor, boolean mustUnderstand = MessageUtils.getContextualBoolean(msg, SecurityConstants.MUST_UNDERSTAND, true); securityProperties.setMustUnderstand(mustUnderstand); + + boolean validateSchemas = + MessageUtils.getContextualBoolean(msg, "schema-validation-enabled", false); + securityProperties.setDisableSchemaValidation(!validateSchemas); } private Collection<Pattern> convertCertConstraints(String certConstraints) {
