No, the signature verification is done by another program, URL encode may
confuse it when dereferencing
to local system.
However, I will try. Thanks.
----- Original Message -----
Did you URL encode before passing the String form of the URI in to the
Reference? I pass my URIs as URI objects until the last moment, so that I
don't have to chase down encoded/unencoded data paths through the code.
Saves me a lot of headaches and some potential security holes.
-Jason
(I will never understand why both xmlsec and the Java dsig API have so
many method arguments called "String uri". You are all certainly welcome to
try to explain, but I will simply laugh at you if you do. I may point at
the same time.)
On Tue, Nov 11, 2008 at 12:13 AM, Ling Xiaohan <[EMAIL PROTECTED]>
wrote:
Hi,
URI attribute of <Reference> tag can be set to a relative path in
local file
system, but when the path contains blank space, it seems this
<Reference>
tag coulde not be created by XMLSignatureFactory.newReference method.
Ex.,
<Reference URI="My document/test.txt">
where there is a space in "My document".
Is this a limit?
Thanks.
----------------------------------------------------------------------------
--
- Jason
