Google GitGoogle Git
Sign in
apache/ws-wss4j/HEAD
  1. 64c78ee EncryptedHeader child confusion causing wrong protected-header selection (#687) by Colm O hEigeartaigh · 16 hours ago master
  2. 144367b Make sure we can't register a fake SOAP Body for lookup (#686) by Colm O hEigeartaigh · 31 hours ago
  3. bb75f5a Docs update by Colm O hEigeartaigh · 2 days ago
  4. 512bf20 Fix sender-vouches signature referencing (#685) by Colm O hEigeartaigh · 2 days ago
  5. 84e6de0 Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) by Colm O hEigeartaigh · 2 days ago
  6. b1f77e8 WSS-729 Switch default JasyptPasswordEncryptor algorithm to PBEWithHmacSHA512AndAES_256 (#683) by Colm O hEigeartaigh · 2 days ago
  7. ef2bb58 Fix issues with SignedElements / EncryptedElements (#682) by Colm O hEigeartaigh · 3 days ago
  8. b12975b Removing duplicate ReplayCache call by Colm O hEigeartaigh · 3 days ago
  9. c304f47 Correct XOP javadoc (#680) by Colm O hEigeartaigh · 3 days ago
  10. 0c03575 Add security documentation for StAX (#679) by Colm O hEigeartaigh · 3 days ago
  11. 41c351d PMD test fix by Colm O hEigeartaigh · 3 days ago
  12. 1a0a1ee Check the SOAPAction matches the body for the StAX policy case (#678) by Colm O hEigeartaigh · 3 days ago
  13. cd7de41 Reject mismatched symmetric key lengths to prevent cross-algorithm key reuse (#677) by Colm O hEigeartaigh · 4 days ago
  14. a8804c6 Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#675) by dependabot[bot] · 4 days ago
  15. 20a13ea Enforce isAllowRSA15KeyTransportAlgorithm for the StAX layer (#674) by Colm O hEigeartaigh · 5 days ago
  16. 57534d6 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#658) by dependabot[bot] · 5 days ago
  17. debfd9c Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 (#659) by dependabot[bot] · 5 days ago
  18. d29494d Only set the StAX RSA 1.5 + UsernameToken No Password properties if we have a corresponding policy (#672) by Colm O hEigeartaigh · 7 days ago
  19. 80e7603 Align StAX security header processing with the DOM code (#671) by Colm O hEigeartaigh · 8 days ago
  20. 5ea75cf Fix a potential NPE with HSM based Crypto instances in the derived key parser (#670) by Colm O hEigeartaigh · 8 days ago
  21. 7626a1a Put a max bound on Derived Key offset + length (#669) by Colm O hEigeartaigh · 8 days ago
  22. 51272fc Enable and fix derived key WS-SecurityPolicy validation in the DOM code (#668) by Colm O hEigeartaigh · 8 days ago
  23. cc9bf13 Put a lower bound of 16 bytes on minimum derived key length (#667) by Colm O hEigeartaigh · 8 days ago
  24. 340ff3f Enforce signature protection as well for SOAP 12 streaming (#666) by Colm O hEigeartaigh · 9 days ago
  25. 447079e Group codeql updates (#665) by Colm O hEigeartaigh · 11 days ago
  26. de3a53f Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 (#663) by dependabot[bot] · 11 days ago
  27. bf84141 Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#661) by dependabot[bot] · 11 days ago
  28. ca3cb93 Bump actions/setup-java from 5.7.0 to 6.0.0 (#662) by dependabot[bot] · 11 days ago
  29. 52d6ae3 Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 (#664) by dependabot[bot] · 11 days ago
  30. 02ed513 Bump junit.version from 6.0.3 to 6.1.3 (#656) by dependabot[bot] · 2 weeks ago
  31. 8ab3d3d Bump xmlunit.version from 2.12.0 to 2.13.0 (#655) by dependabot[bot] · 2 weeks ago
  32. 2852ae1 Bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 (#649) by dependabot[bot] · 2 weeks ago
  33. fca98b0 Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 (#648) by dependabot[bot] · 2 weeks ago
  34. f889d39 Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 (#652) by dependabot[bot] · 2 weeks ago
  35. 6520bce Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 (#651) by dependabot[bot] · 2 weeks ago
  36. 84ec791 Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#650) by dependabot[bot] · 2 weeks ago
  37. c6e83fe Bump opensaml.version from 5.2.1 to 5.2.3 (#612) by dependabot[bot] · 2 weeks ago
  38. 3936cec WSS-728 - Switch to JBoss repository (#654) by Colm O hEigeartaigh · 2 weeks ago
  39. b975a69 Fixup sha pinning by Colm O hEigeartaigh · 5 weeks ago
  40. 6d86803 Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 (#641) by dependabot[bot] · 5 weeks ago
  41. 6f20d40 Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#642) by dependabot[bot] · 5 weeks ago
  42. 6ea090e Bump actions/setup-java from 5.6.0 to 5.7.0 (#645) by dependabot[bot] · 5 weeks ago
  43. b158737 Bump github/codeql-action/init from 4.37.3 to 4.37.6 (#646) by dependabot[bot] · 5 weeks ago
  44. 440a7b4 Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 (#644) by dependabot[bot] · 5 weeks ago
  45. 83b6dcd Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 (#643) by dependabot[bot] · 5 weeks ago
  46. c565843 Bump slf4j.version from 2.0.17 to 2.0.18 (#632) by dependabot[bot] · 6 weeks ago
  47. bfb5158 Bump xmlunit.version from 2.11.0 to 2.12.0 (#633) by dependabot[bot] · 6 weeks ago
  48. 789b2fa Bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#639) by dependabot[bot] · 6 weeks ago
  49. 1ee59fe Bump actions/checkout from 7.0.0 to 7.0.1 (#634) by dependabot[bot] · 7 weeks ago
  50. e0aa09e Bump actions/setup-java from 5.4.0 to 5.6.0 (#635) by dependabot[bot] · 7 weeks ago
  51. 8969a96 Bump github/codeql-action/analyze from 4.36.2 to 4.37.3 (#636) by dependabot[bot] · 7 weeks ago
  52. 18e55db Bump github/codeql-action/init from 4.36.2 to 4.37.3 (#637) by dependabot[bot] · 7 weeks ago
  53. ba4f6d3 Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3 (#638) by dependabot[bot] · 7 weeks ago
  54. 1c479bd Updating Neethi to 3.2.3 by Colm O hEigeartaigh · 7 weeks ago
  55. c6812c3 Bump com.sun.xml.messaging.saaj:saaj-impl from 3.0.4 to 3.0.6 (#630) by dependabot[bot] · 8 weeks ago
  56. 64c71d7 Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#629) by dependabot[bot] · 8 weeks ago
  57. 9331244 Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) (#628) by Jarek Potiuk · 8 weeks ago
  58. 11b47d5 Bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.2 (#611) by dependabot[bot] · 8 weeks ago
  59. ec36c34 Renaming threat model by Colm O hEigeartaigh · 8 weeks ago
  60. 636e932 Add draft project security threat-model document (#618) by Jarek Potiuk · 8 weeks ago
  61. 20498a8 Bump github/codeql-action from 4.36.0 to 4.36.2 (#622) by dependabot[bot] · 8 weeks ago
  62. 21c27e5 Bump actions/setup-java from 5.2.0 to 5.4.0 (#627) by dependabot[bot] · 8 weeks ago
  63. 6da8196 Bump actions/cache from 5.0.5 to 6.1.0 (#626) by dependabot[bot] · 8 weeks ago
  64. 4f94480 Bump actions/checkout from 6.0.2 to 7.0.0 (#624) by dependabot[bot] · 8 weeks ago
  65. 554e329 Bump github/codeql-action from 4.35.5 to 4.36.0 (#619) by dependabot[bot] · 3 months ago
  66. 3da873c WSS-726 Make EncryptedKeyProcessor.getAsymmetricDecryptedByte overridable (#616) by gmextec · 4 months ago
  67. b8ecd21 Bump github/codeql-action from 4.35.3 to 4.35.5 (#615) by dependabot[bot] · 4 months ago
  68. 9e32314 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 (#606) by dependabot[bot] · 4 months ago
  69. 55d417e Bump org.ehcache:ehcache from 3.11.1 to 3.12.0 (#607) by dependabot[bot] · 4 months ago
  70. f755765 Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre (#608) by dependabot[bot] · 4 months ago
  71. 883306d Bump github/codeql-action from 4.35.2 to 4.35.3 (#609) by dependabot[bot] · 4 months ago
  72. 7486cd4 Set up default protection ruleset for default and release branches (#610) by The Apache Software Foundation · 4 months ago
  73. d750ba9 Bump org.apache.felix:maven-bundle-plugin from 6.0.0 to 6.0.2 (#595) by dependabot[bot] · 5 months ago
  74. 4d4cac8 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#605) by dependabot[bot] · 5 months ago
  75. 558cc6c Bump org.tukaani:xz from 1.11 to 1.12 (#596) by dependabot[bot] · 5 months ago
  76. 7ab4df1 Bump org.apache.rat:apache-rat-plugin from 0.17 to 0.18 (#599) by dependabot[bot] · 5 months ago
  77. 9e5c403 Bump org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84 in /parent (#601) by dependabot[bot] · 5 months ago
  78. 30fb914 Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 in /parent (#602) by dependabot[bot] · 5 months ago
  79. d9754fe Bump actions/cache from 5.0.4 to 5.0.5 (#603) by dependabot[bot] · 5 months ago
  80. 7db0561 Bump github/codeql-action from 4.35.1 to 4.35.2 (#604) by dependabot[bot] · 5 months ago
  81. 8dfcde3 Updating Apache Neethi to 3.2.2 by Colm O hEigeartaigh · 5 months ago
  82. 0ca2ea2 Adding unit test to show no principal is returned for when a SAML Validator is not set by Colm O hEigeartaigh · 5 months ago
  83. 814c7ac Bump opensaml.version from 5.2.0 to 5.2.1 (#587) by dependabot[bot] · 5 months ago
  84. be5fca1 Use new shibboleth Maven repository (#593) by Aurélien Pupier · 5 months ago
  85. f4413a1 Exclude commons-codec coming from commons-compress by Colm O hEigeartaigh · 5 months ago
  86. 569206f Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 (#586) by dependabot[bot] · 5 months ago
  87. f20aa5d Bump junit.version from 6.0.2 to 6.0.3 (#588) by dependabot[bot] · 5 months ago
  88. 969185e Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#590) by dependabot[bot] · 5 months ago
  89. 4c145be Bump actions/cache from 5.0.2 to 5.0.4 (#592) by dependabot[bot] · 5 months ago
  90. 5512a27 Bump github/codeql-action from 4.32.0 to 4.35.1 (#594) by dependabot[bot] · 5 months ago
  91. f0af889 Fixing doap by Colm O hEigeartaigh · 7 months ago
  92. 155a9df Fixing maven central badge by Colm O hEigeartaigh · 7 months ago
  93. ef61f33 Adding basic WSS4J doap by Colm O hEigeartaigh · 7 months ago
  94. 70a930a Switching README links to https by Colm O hEigeartaigh · 7 months ago
  95. 2a8d286 Bump opensaml.version from 5.1.6 to 5.2.0 (#581) by dependabot[bot] · 7 months ago
  96. c2d43a6 Bump org.apache.maven.plugins:maven-compiler-plugin (#578) by dependabot[bot] · 7 months ago
  97. ac16516 Bump github/codeql-action from 4.31.10 to 4.32.0 (#579) by dependabot[bot] · 7 months ago
  98. c2c6682 Bump actions/setup-java from 5.1.0 to 5.2.0 (#580) by dependabot[bot] · 7 months ago
  99. 0909a10 Bump org.cryptacular:cryptacular from 1.2.7 to 1.3.0 (#575) by dependabot[bot] · 8 months ago
  100. ed971a6 Bump actions/checkout from 6.0.1 to 6.0.2 (#577) by dependabot[bot] · 8 months ago