Skip to content

XMLCipher refactor#587

Open
coheigea wants to merge 1 commit into
mainfrom
coheigea/xmlsec
Open

XMLCipher refactor#587
coheigea wants to merge 1 commit into
mainfrom
coheigea/xmlsec

Conversation

@coheigea
Copy link
Copy Markdown
Contributor

No description provided.

@coheigea coheigea requested a review from seanjmullan May 7, 2026 15:50
String encMethodAlgorithm = encryptedData.getEncryptionMethod().getAlgorithm();

// Reject any attempt to decrypt with an algorithm that doesn't match the one specified when the XMLCipher was initialized
if (algorithm != null && !algorithm.equals(encMethodAlgorithm)) {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are several other code paths that call getEncryptionMethod().getAlgorithm() - have you checked them for similar issues?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants