dev  

Messages by Thread

• [PR] Only set the StAX RSA 1.5 + UsernameToken No Password properties if w… [ws-wss4j] via GitHub
  • Re: [PR] Only set the StAX RSA 1.5 + UsernameToken No Password properties if w… [ws-wss4j] via GitHub
• [PR] Align StAX security header processing with the DOM code [ws-wss4j] via GitHub
  • Re: [PR] Align StAX security header processing with the DOM code [ws-wss4j] via GitHub
• [PR] Fix a potential NPE with HSM based Crypto instances in the derived ke… [ws-wss4j] via GitHub
  • Re: [PR] Fix a potential NPE with HSM based Crypto instances in the derived ke… [ws-wss4j] via GitHub
• [PR] Put a max bound on Derived Key offset + length [ws-wss4j] via GitHub
  • Re: [PR] Put a max bound on Derived Key offset + length [ws-wss4j] via GitHub
• [PR] Bump surefire.version from 3.5.6 to 3.6.0 [ws-axiom] via GitHub
• [PR] Enable and fix derived key WS-SecurityPolicy validation in the DOM code [ws-wss4j] via GitHub
  • Re: [PR] Enable and fix derived key WS-SecurityPolicy validation in the DOM code [ws-wss4j] via GitHub
• [PR] Put a lower bound of 16 bytes on minimum derived key length [ws-wss4j] via GitHub
  • Re: [PR] Put a lower bound of 16 bytes on minimum derived key length [ws-wss4j] via GitHub
• [PR] Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 [ws-axiom] via GitHub
• [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [ws-axiom] via GitHub
• [PR] Enforce signature protection as well for SOAP 12 streaming [ws-wss4j] via GitHub
  • Re: [PR] Enforce signature protection as well for SOAP 12 streaming [ws-wss4j] via GitHub
• [PR] Group codeql updates [ws-xmlschema] via GitHub
  • Re: [PR] Group codeql updates [ws-xmlschema] via GitHub
• [PR] Group codeql updates [ws-wss4j] via GitHub
  • Re: [PR] Group codeql updates [ws-wss4j] via GitHub
• [PR] Group codeql updates [ws-neethi] via GitHub
  • Re: [PR] Group codeql updates [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.8 to 4.37.9 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.8 to 4.37.9 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 [ws-xmlschema] via GitHub
• [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-xmlschema] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.8 to 4.37.9 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.8 to 4.37.9 [ws-neethi] via GitHub
• [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-neethi] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [ws-wss4j] via GitHub
• [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-wss4j] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-wss4j] via GitHub
• [PR] Bump org.wildfly:wildfly-preview-dist from 41.0.0.Final to 41.0.1.Final [ws-axiom] via GitHub
  • Re: [PR] Bump org.wildfly:wildfly-preview-dist from 41.0.0.Final to 41.0.1.Final [ws-axiom] via GitHub
• [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 [ws-axiom] via GitHub
  • Re: [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 [ws-axiom] via GitHub
• [PR] Remove eclipse-settings-maven-plugin configuration [ws-axiom] via GitHub
  • Re: [PR] Remove eclipse-settings-maven-plugin configuration [ws-axiom] via GitHub
• [PR] Fix DOMSource correctness bug [ws-xmlschema] via GitHub
  • Re: [PR] Fix DOMSource correctness bug [ws-xmlschema] via GitHub
• [PR] Harden internal parser against DTDs [ws-xmlschema] via GitHub
  • Re: [PR] Harden internal parser against DTDs [ws-xmlschema] via GitHub
• [PR] Tighten Max/Min Occurs parsing [ws-xmlschema] via GitHub
  • Re: [PR] Tighten Max/Min Occurs parsing [ws-xmlschema] via GitHub
• [PR] Harden default resolver [ws-xmlschema] via GitHub
  • Re: [PR] Harden default resolver [ws-xmlschema] via GitHub
• [PR] Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.2 [ws-wss4j] via GitHub
• [PR] Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 [ws-wss4j] via GitHub
• [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 [ws-wss4j] via GitHub
• [PR] Bump actions/setup-java from 5 to 6 [ws-axiom] via GitHub
  • Re: [PR] Bump actions/setup-java from 5 to 6 [ws-axiom] via GitHub
• [PR] Bump groovy.version from 5.1.0 to 5.1.1 [ws-axiom] via GitHub
  • Re: [PR] Bump groovy.version from 5.1.0 to 5.1.1 [ws-axiom] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.8 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.8 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.8 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.8 [ws-xmlschema] via GitHub
• [PR] Properly throw XMLSchemaException in some places [ws-xmlschema] via GitHub
  • Re: [PR] Properly throw XMLSchemaException in some places [ws-xmlschema] via GitHub
• [PR] Add max nesting depth [ws-xmlschema] via GitHub
  • Re: [PR] Add max nesting depth [ws-xmlschema] via GitHub
• [PR] Bump bcprov.version from 1.84 to 1.85 [ws-wss4j] via GitHub
  • Re: [PR] Bump bcprov.version from 1.84 to 1.85 [ws-wss4j] via GitHub
  • Re: [PR] Bump bcprov.version from 1.84 to 1.85 [ws-wss4j] via GitHub
  • Re: [PR] Bump bcprov.version from 1.84 to 1.85 [ws-wss4j] via GitHub
• [PR] Bump junit.version from 6.0.3 to 6.1.3 [ws-wss4j] via GitHub
  • Re: [PR] Bump junit.version from 6.0.3 to 6.1.3 [ws-wss4j] via GitHub
  • Re: [PR] Bump junit.version from 6.0.3 to 6.1.3 [ws-wss4j] via GitHub
• [PR] Bump xmlunit.version from 2.12.0 to 2.13.0 [ws-wss4j] via GitHub
  • Re: [PR] Bump xmlunit.version from 2.12.0 to 2.13.0 [ws-wss4j] via GitHub
• [jira] [Resolved] (WSS-728) Switch to JBoss repository to download Opensaml Colm O hEigeartaigh (Jira)
• [PR] WSS-728 - Switch to JBoss repository [ws-wss4j] via GitHub
  • Re: [PR] WSS-728 - Switch to JBoss repository [ws-wss4j] via GitHub
• [jira] [Created] (WSS-728) Switch to JBoss repository to download Opensaml Colm O hEigeartaigh (Jira)
• [PR] Impose an import depth limit [ws-xmlschema] via GitHub
  • Re: [PR] Impose an import depth limit [ws-xmlschema] via GitHub
• [PR] Fix resolved schema cache key collisions and validate cache hits [ws-xmlschema] via GitHub
  • Re: [PR] Fix resolved schema cache key collisions and validate cache hits [ws-xmlschema] via GitHub
• [PR] Use provider-neutral X.509 key identifier parsing [ws-wss4j] via GitHub
  • Re: [PR] Use provider-neutral X.509 key identifier parsing [ws-wss4j] via GitHub
  • Re: [PR] Use provider-neutral X.509 key identifier parsing [ws-wss4j] via GitHub
• [PR] Bump org.apache.xmlbeans:xmlbeans from 5.3.0 to 5.4.0 [ws-axiom] via GitHub
  • Re: [PR] Bump org.apache.xmlbeans:xmlbeans from 5.3.0 to 5.4.0 [ws-axiom] via GitHub
• [PR] Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre [ws-xmlschema] via GitHub
  • Re: [PR] Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre [ws-xmlschema] via GitHub
• [PR] Improve cycle detection in the schema walker [ws-xmlschema] via GitHub
  • Re: [PR] Improve cycle detection in the schema walker [ws-xmlschema] via GitHub
• [PR] Fix state machine generation for shared schema types [ws-xmlschema] via GitHub
  • Re: [PR] Fix state machine generation for shared schema types [ws-xmlschema] via GitHub
• [PR] Add maxDecisionPoints and maxReplayedEvents to the path walker [ws-xmlschema] via GitHub
  • Re: [PR] Add maxDecisionPoints and maxReplayedEvents to the path walker [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-wss4j] via GitHub
• [PR] Bump biz.aQute.bnd:biz.aQute.bndlib from 7.3.0 to 7.4.0 [ws-axiom] via GitHub
  • Re: [PR] Bump biz.aQute.bnd:biz.aQute.bndlib from 7.3.0 to 7.4.0 [ws-axiom] via GitHub
• [PR] Bump spring.version from 7.0.8 to 7.0.9 [ws-axiom] via GitHub
  • Re: [PR] Bump spring.version from 7.0.8 to 7.0.9 [ws-axiom] via GitHub
• [PR] Use an explicit heap stack in SaxWalkerOverDom [ws-xmlschema] via GitHub
  • Re: [PR] Use an explicit heap stack in SaxWalkerOverDom [ws-xmlschema] via GitHub
• [PR] Explicitly catch NumberFormatException in XmlSchemaElementValidator [ws-xmlschema] via GitHub
  • Re: [PR] Explicitly catch NumberFormatException in XmlSchemaElementValidator [ws-xmlschema] via GitHub
• [PR] Isolate downloaded policies from the main registry [ws-neethi] via GitHub
  • Re: [PR] Isolate downloaded policies from the main registry [ws-neethi] via GitHub
• [PR] Also exclude some IPv6 addresses [ws-neethi] via GitHub
  • Re: [PR] Also exclude some IPv6 addresses [ws-neethi] via GitHub
• [PR] Check all DNS entries for the host to see if they are allowed and pin… [ws-neethi] via GitHub
  • Re: [PR] Check all DNS entries for the host to see if they are allowed and pin… [ws-neethi] via GitHub
• [PR] Adding new org.apache.neethi.remote.maxFetchMillis property for Polic… [ws-neethi] via GitHub
  • Re: [PR] Adding new org.apache.neethi.remote.maxFetchMillis property for Polic… [ws-neethi] via GitHub
• [PR] Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre [ws-axiom] via GitHub
  • Re: [PR] Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre [ws-axiom] via GitHub
• [PR] Add a bound on the maximum total time allowed to fetch a remote polic… [ws-neethi] via GitHub
  • Re: [PR] Add a bound on the maximum total time allowed to fetch a remote polic… [ws-neethi] via GitHub
• [PR] Adding subtree budget [ws-neethi] via GitHub
  • Re: [PR] Adding subtree budget [ws-neethi] via GitHub
• [PR] Adding policy intersection budget [ws-neethi] via GitHub
  • Re: [PR] Adding policy intersection budget [ws-neethi] via GitHub
• [PR] Adding a policy comparator budget [ws-neethi] via GitHub
  • Re: [PR] Adding a policy comparator budget [ws-neethi] via GitHub
• [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.9.0 to 3.10.0 [ws-axiom] via GitHub
  • Re: [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.9.0 to 3.10.0 [ws-axiom] via GitHub
• [PR] Updating the threat model with the policy normalize behaviour [ws-neethi] via GitHub
  • Re: [PR] Updating the threat model with the policy normalize behaviour [ws-neethi] via GitHub
• [PR] Add a cap on max normalized components [ws-neethi] via GitHub
  • Re: [PR] Add a cap on max normalized components [ws-neethi] via GitHub
• [PR] Put limit on reference expansions [ws-neethi] via GitHub
  • Re: [PR] Put limit on reference expansions [ws-neethi] via GitHub
• [PR] Fixing recursion case for nested policy [ws-neethi] via GitHub
  • Re: [PR] Fixing recursion case for nested policy [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-neethi] via GitHub
• [PR] Bump groovy.version from 5.0.8 to 5.1.0 [ws-axiom] via GitHub
  • Re: [PR] Bump groovy.version from 5.0.8 to 5.1.0 [ws-axiom] via GitHub
• Build failed in Jenkins: webservices » Apache WSS4J - 2.3.x-fixes JDK 8 #41 Apache Jenkins Server
• [PR] Bump org.apache.maven:apache-maven from 3.9.11 to 3.9.16 [ws-axiom] via GitHub
  • Re: [PR] Bump org.apache.maven:apache-maven from 3.9.11 to 3.9.16 [ws-axiom] via GitHub
• [PR] Bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 [ws-wss4j] via GitHub
  • Re: [PR] Bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 [ws-wss4j] via GitHub
• [PR] Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 [ws-wss4j] via GitHub
  • Re: [PR] Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 [ws-wss4j] via GitHub
• [PR] Bump org.junit:junit-bom from 6.1.2 to 6.1.3 [ws-axiom] via GitHub
  • Re: [PR] Bump org.junit:junit-bom from 6.1.2 to 6.1.3 [ws-axiom] via GitHub
• [PR] Remove Bouncy Castle from X.509 key identifier parsing [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.4 to 4.37.6 [ws-xmlschema] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.4 to 4.37.6 [ws-xmlschema] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.4 to 4.37.6 [ws-neethi] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.4 to 4.37.6 [ws-neethi] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.3 to 4.37.6 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.3 to 4.37.6 [ws-wss4j] via GitHub
• [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-wss4j] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 [ws-wss4j] via GitHub
  • Re: [PR] Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 [ws-wss4j] via GitHub
• [PR] Bump checkerframework.version from 4.2.1 to 4.2.2 [ws-axiom] via GitHub
  • Re: [PR] Bump checkerframework.version from 4.2.1 to 4.2.2 [ws-axiom] via GitHub
• [PR] Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 [ws-axiom] via GitHub
  • Re: [PR] Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 [ws-axiom] via GitHub
• [PR] Bump jetty.version from 12.1.11 to 12.1.12 [ws-axiom] via GitHub
  • Re: [PR] Bump jetty.version from 12.1.11 to 12.1.12 [ws-axiom] via GitHub
• [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-xmlschema] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-xmlschema] via GitHub
• [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-neethi] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-neethi] via GitHub
• [PR] Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 [ws-wss4j] via GitHub
  • Re: [PR] Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 [ws-wss4j] via GitHub
• [PR] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 [ws-wss4j] via GitHub
  • Re: [PR] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 [ws-wss4j] via GitHub
• [PR] WSS-727 Do not cache SwA attachment References when verifying a Signature [ws-wss4j] via GitHub
• [PR] Bump github/codeql-action from 4.37.3 to 4.37.4 [ws-xmlschema] via GitHub

• Earlier messages