Some wonky WSS implementations submit an incomplete timestamp:
<soap:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd&q
uot;>
<wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
" wsu:Id="Timestamp-23256120">
<wsu:Created>2008-02-07T23:47:19.552Z</wsu:Created>
</wsu:Timestamp>
</wsse:Security>
</soap:Header>
that crashes WSS4R:
NoMethodError: undefined method `text' for nil:NilClass
from /home/ubuntu/p4/cnuapp/bug/5717/vendor/gems/wss4r-0.5/lib/wss4r/security/xml/timestamp.rb:30:in
`unprocess'
from /home/ubuntu/p4/cnuapp/bug/5717/vendor/gems/wss4r-0.5/lib/wss4r/security/xml/security.rb:29:in `unprocess'
from /home/ubuntu/p4/cnuapp/bug/5717/vendor/gems/wss4r-0.5/lib/wss4r/security/security.rb:143:in
`process_document_unmarshal'
Need to add nil checking. |