xml-crypto - npm Package Compare versions

Comparing version 1.1.2 to 1.1.3

example/example.js

@@ -0,0 +0,0 @@ var select = require('xml-crypto').xpath

index.js

@@ -0,0 +0,0 @@ var select = require('xpath').select

lib/c14n-canonicalization.js

@@ -0,0 +0,0 @@ /* jshint laxcomma: true */

lib/enveloped-signature.js

@@ -0,0 +0,0 @@ var xpath = require('xpath');

lib/exclusive-canonicalization.js

@@ -0,0 +0,0 @@ /* jshint laxcomma: true */

lib/signed-xml.js

@@ -481,3 +481,27 @@ var xpath = require('xpath')
     var digest = hash.getHash(canonXml)
+    
+    if (!validateDigestValue(digest, ref.digestValue)) {
+      if (ref.inclusiveNamespacesPrefixList) {
+        // fallback: apply InclusiveNamespaces workaround (https://github.com/yaronn/xml-crypto/issues/72)
+        var prefixList = ref.inclusiveNamespacesPrefixList instanceof Array ? ref.inclusiveNamespacesPrefixList : ref.inclusiveNamespacesPrefixList.split(' ');
+        var supported_definitions = {
+          'xs': 'http://www.w3.org/2001/XMLSchema',
+          'xsi': 'http://www.w3.org/2001/XMLSchema-instance',
+          'saml': 'urn:oasis:names:tc:SAML:2.0:assertion'
+        }
 
+        prefixList.forEach(function (prefix) {
+          if (supported_definitions[prefix]) {
+            elem[0].setAttributeNS('http://www.w3.org/2000/xmlns/', 'xmlns:' + prefix, supported_definitions[prefix]);
+          }
+        });
+
+        canonXml = this.getCanonXml(ref.transforms, elem[0], { inclusiveNamespacesPrefixList: ref.inclusiveNamespacesPrefixList });
+        digest = hash.getHash(canonXml);
+        if (digest === ref.digestValue) {
+          return true;
+        }
+      }
+    }
+
     if (!validateDigestValue(digest, ref.digestValue)) {
@@ -484,0 +508,0 @@ this.validationErrors.push("invalid signature: for uri " + ref.uri +

lib/utils.js

@@ -0,0 +0,0 @@ var select = require('xpath').select

package.json

 {
   "name": "xml-crypto",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "Xml digital signature and encryption library for Node.js",
@@ -5,0 +5,0 @@ "engines": {

README.md

@@ -0,0 +0,0 @@ ## xml-crypto

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Lines of code

1267

increased by1.69%

Worsened metrics

Total package byte prevSize

71853

decreased by-1.32%

No dependency changes