DOMValidateContext (Java Platform SE 8 ) (original) (raw)


public class DOMValidateContext
extends DOMCryptoContext
implements XMLValidateContext
A DOM-specific XMLValidateContext. This class contains additional methods to specify the location in a DOM tree where an XMLSignature is to be unmarshalled and validated from.
Note that the behavior of an unmarshalled XMLSignature is undefined if the contents of the underlying DOM tree are modified by the caller after the XMLSignature is created.
Also, note that DOMValidateContext instances can contain information and state specific to the XML signature structure it is used with. The results are unpredictable if aDOMValidateContext is used with different signature structures (for example, you should not use the same DOMValidateContext instance to validate two different XMLSignature objects).
Implementation Note:
The JDK implementation supports a secure validation mode which can be enabled by setting the org.jcp.xml.dsig.secureValidation property to Boolean.TRUE (see the setProperty method). When enabled, validation of XML signatures are subject to stricter checking of algorithms and other constraints as specified by thejdk.xml.dsig.secureValidationPolicy security property. The mode can be disabled by setting the property to Boolean.FALSE. The mode can also be enabled or disabled by setting the org.jcp.xml.dsig.secureValidation system property to "true" or "false". Any other value for the system property is also treated as "false". If the system property is set, it supersedes theDOMValidateContext property value. The secure validation mode is enabled by default if you are running code with a SecurityManager, otherwise it is disabled by default.
Since:
1.6
See Also:
XMLSignatureFactory.unmarshalXMLSignature(XMLValidateContext)

Submit a bug or feature
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2025, Oracle and/or its affiliates. All rights reserved. Use is subject to license terms. Also see the documentation redistribution policy.