Skip to content

feat(xmldsig): add signature template builders #74

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
polaz wants to merge 8 commits into
base: main
Choose a base branch
from
+618 −2
Open

feat(xmldsig): add signature template builders #74

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
5750a18
build(deps): update Rust dependencies
polaz Jul 3, 2026
e406533
feat(xmldsig): add signature template builders
polaz Jul 3, 2026
4122fe4
docs: update implementation dependencies
polaz Jul 3, 2026
2e6d289
test(xmldsig): cover builder validation defects
polaz Jul 3, 2026
8797e7a
fix(xmldsig): validate builder XML names
polaz Jul 3, 2026
6c8bdcd
test(xmldsig): cover NCName markup injection
polaz Jul 3, 2026
ee25df4
fix(xmldsig): harden NCName validation
polaz Jul 3, 2026
dab84be
style(xmldsig): format NCName regression test
polaz Jul 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@ readme = "README.md"
[dependencies]
# XML parsing
roxmltree = { version = "0.21", features = ["positions"] }
quick-xml = "0.38"

# Crypto
rsa = { version = "0.9", optional = true }
Expand All @@ -38,7 +39,7 @@ thiserror = "2"

[dev-dependencies]
rcgen = "0.14.6"
time = "0.3"
time = "0.3.53"

[features]
default = ["xmldsig", "c14n"]
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ Every SAML, SOAP, and WS-Security implementation depends on libxmlsec1 — a C l
- Has decades of CVEs in XML parsing and signature validation
- Cannot cross-compile easily

`xml-sec` is a ground-up Rust rewrite using `roxmltree` + `ring` + `x509-parser`. Single `cargo build`, works everywhere Rust works.
`xml-sec` is a ground-up Rust rewrite using `roxmltree` for parsing, `quick-xml` for writing, RustCrypto for RSA/ECDSA/SHA, and `x509-parser` for certificates. Single `cargo build`, works everywhere Rust works.

## Status

Expand Down
Loading