xml-sec 0.1.23

Pure Rust XML Security: XMLDSig, XMLEnc, C14N. Drop-in replacement for libxmlsec1.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

use xml_sec::{
    encoding::decode_xml_octets,
    xml_input::{Error, decode_xml_bounded},
};

#[test]
fn trusted_encoding_metadata_decodes_declarationless_xml_with_a_limit() {
    let latin1 = b"<root>caf\xe9</root>";
    assert!(matches!(
        decode_xml_octets(latin1, 64),
        Err(Error::InvalidBytes("UTF-8"))
    ));

    let decoded = decode_xml_bounded(latin1, Some("ISO-8859-1"), 64)
        .expect("trusted metadata selects Latin-1");
    assert_eq!(decoded, "<root>café</root>");
    assert!(matches!(
        decode_xml_bounded(latin1, Some("ISO-8859-1"), 8),
        Err(Error::DecodedLimit { maximum: 8, .. })
    ));
}

#[test]
fn trusted_metadata_cannot_override_the_xml_declaration() {
    let xml = b"<?xml version=\"1.0\" encoding=\"UTF-8\"?><root/>";
    assert!(matches!(
        decode_xml_bounded(xml, Some("ISO-8859-1"), 128),
        Err(Error::ConflictingEncoding(_))
    ));
}