Re: [xmlsec] Reference URI: ID vs CDATA

[Aleksey Sanin]

Visa has specified this attribute as 'CDATA' not 'ID'. In practice, the PARes messages contain characters invalid for 'ID' type and this is why verification fails sometimes. And I forgot to say that I am not sure how can you reference CDATA attribute using "id('AAA')" XPath function or "#AAA" XPointer _expression_. May be I am missing something but IMHO this is just impossible:     XPath        http://www.w3.org/TR/xpath#section-Node-Set-Functions        http://www.w3.org/TR/xpath#unique-id        The id function selects elements by their unique ID (see [5.2.1 Unique IDs]).        ...        An element node may have a unique identifier (ID). This is the value of the attribute        that is declared in the DTD as type ID.     XPointer       http://www.w3.org/TR/xptr-framework/#shorthand       The identifiers of an element are determined as follows: If an element information item has an attribute information item among its [attributes] that is a schema-determined ID, then it is identified by the value of that attribute information item's [schema normalized value] property; If an element information item has an element information item among its [children] that is a schema-determined ID, then it is identified by the value of that element information item's [schema normalized value] property; If an element information item has an attribute information item among its [attributes] that is a DTD-determined ID, then it is identified by the value of that attribute information item's [normalized value] property. An element information item may also be identified by an externally-determined ID value There is an option 4) in XPointer specification that says "do whatever you want" but I doubt that you want to have an interoperable specification based on this it. Aleksey