Alternative XPath Filter

Hi John,

I have a question about the "XML-Signature XPath Filter 2.0" [1]:

Is it possible to apply two xmldsig-xpath-filter transforms after each 
other? Two with Filter="exclude" wont make sense because they operate on 
the full document so that the results from the first transform would be 
discarded by the second one. But maybe it's possible to make an exclude and 
than an include?

Motivation for this question: Assume I have a SOAP msg, inside the body is 
a transaction and _inside_ the transaction, there's somewhere nested the 
signature. I want to sign the body without the signature. This means that I

1: exclude all things outside the body
2: include the body
3: exlude the signature in the body

Let's bridge to the transform which I suggested in [2]: Using my transform, 
I would

exclude-but-search    /
include               /SOAP:Envelope/SOAP:Body
exclude               /SOAP:Envelope/SOAP:Body/x:Transact/ds:Signature

Is it clear why I need _three_ flags and use this inside a single transform 




Received on Tuesday, 19 March 2002 15:01:58 UTC