Package org.apache.wss4j.policy.stax.test

Class VulnerabliltyVectorsTest

java.lang.Object

org.apache.wss4j.stax.test.AbstractTestBase

org.apache.wss4j.policy.stax.test.VulnerabliltyVectorsTest

public class VulnerabliltyVectorsTest
extends AbstractTestBase

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.wss4j.stax.test.AbstractTestBase

AbstractTestBase.TestSecurityEventListener

Field Summary

Fields inherited from class org.apache.wss4j.stax.test.AbstractTestBase

documentBuilderFactory, SECURED_DOCUMENT, TRANSFORMER_FACTORY, xmlInputFactory

Constructor Summary

Constructors

Constructor	Description
VulnerabliltyVectorsTest()

Method Summary

Modifier and Type	Method	Description
void	testSignedBodyRelocationToHeader()
void	testSOAPActionSpoofing()	Tests what happens when an soapAction from an other operation is provided.

Methods inherited from class org.apache.wss4j.stax.test.AbstractTestBase

doInboundSecurity, doInboundSecurity, doInboundSecurity, doInboundSecurity, doInboundSecurity, doInboundSecurity, doInboundSecurityWithWSS4J, doInboundSecurityWithWSS4J_1, doInboundSecurityWithWSS4J_1, doOutboundSecurity, doOutboundSecurity, doOutboundSecurityWithWSS4J, doOutboundSecurityWithWSS4J_1, getJavaSpecificationVersion, getMessageContext, getXPath

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

VulnerabliltyVectorsTest

public VulnerabliltyVectorsTest()

Method Detail

testSOAPActionSpoofing

@Test
@Disabled
public void testSOAPActionSpoofing()
                            throws Exception

Tests what happens when an soapAction from an other operation is provided. Can the policy framework be bypassed?

Throws:

Exception

testSignedBodyRelocationToHeader

@Test
public void testSignedBodyRelocationToHeader()
                                      throws Exception

Throws:

Exception