(axis-axis2-java-rampart) 02/03: RAMPART-420 Allow WS-Security timestamps to be spoofed and BSP checking disabled

[robertlazarski]

This is an automated email from the ASF dual-hosted git repository.

robertlazarski pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-rampart.git

commit f7d0025284383789815e059200b2a3c57642240b
Author: Robert Lazarski <robertlazar...@gmail.com>
AuthorDate: Tue Nov 5 15:14:57 2024 -1000

    RAMPART-420 Allow WS-Security timestamps to be spoofed and BSP checking 
disabled
---
 .../src/main/java/org/apache/rampart/RampartMessageData.java        | 2 +-
 .../org/apache/rampart/policy/builders/RampartConfigBuilder.java    | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git 
a/modules/rampart-core/src/main/java/org/apache/rampart/RampartMessageData.java 
b/modules/rampart-core/src/main/java/org/apache/rampart/RampartMessageData.java
index 713ddf87..f9aa3daa 100644
--- 
a/modules/rampart-core/src/main/java/org/apache/rampart/RampartMessageData.java
+++ 
b/modules/rampart-core/src/main/java/org/apache/rampart/RampartMessageData.java
@@ -441,7 +441,7 @@ public class RampartMessageData {
                     
this.policyData.getRampartConfig().setUtFutureTTL(utFutureTTLInput);
                 }
 
-            } 
+            }
 
             if (axisService != null) { 
                 this.customClassLoader = axisService.getClassLoader(); 
diff --git 
a/modules/rampart-core/src/main/java/org/apache/rampart/policy/builders/RampartConfigBuilder.java
 
b/modules/rampart-core/src/main/java/org/apache/rampart/policy/builders/RampartConfigBuilder.java
index 016ab4a8..7b34c1c7 100644
--- 
a/modules/rampart-core/src/main/java/org/apache/rampart/policy/builders/RampartConfigBuilder.java
+++ 
b/modules/rampart-core/src/main/java/org/apache/rampart/policy/builders/RampartConfigBuilder.java
@@ -127,6 +127,12 @@ public class RampartConfigBuilder implements 
AssertionBuilder<OMElement> {
                     .build(childElement.getFirstElement()));
         }
 
+       childElement = element.getFirstChildWithName(new QName(
+        RampartConfig.NS, RampartConfig.TS_PRECISION_IN_MS_LN));
+        if (childElement != null) {
+            
rampartConfig.setTimestampPrecisionInMs(childElement.getText().trim());
+        }
+
         childElement = element.getFirstChildWithName(new QName(
                 RampartConfig.NS, RampartConfig.TS_TTL_LN));
         if (childElement != null) {