|Re: [higgins-dev] org.eclipse.higgins.sts.xmlsecurity.apache|
I found that the XMLUtils is from the 1.4.0 branch  and it is to disable the line breaks on signatures which CardSpace doesn’t like. With XML-Security 1.4.1 and forward, one can define a system property “org.apache.xml.security.ignoreLineBreaks=true” to turn off line break generation on signatures. It’s a bit hacky configuration, but at least it’s something. I’ve submitted bugzilla  to upgrade to the latest version
The %subj% project includes XMLUtils from the Apache Santuario project (xmlsec) but it doesn’t say what version is it from and what changes are applied to it. Having this class included in Higgins prevents the possibility of upgrading xmlsec to any version higher than 1.4.1 due to classloading issues. Before I remove this class, I’d like to know about what version it was forked from, why was it forked and what changes were introduced. Any info is greatly appreciated.