Open Source XPath Filter 2.0 implementation [closed]

Question

Does anyone know of an open source implementation for XPath Filter 2.0, preferrably in Java? But any other language would also be fine. The standard is not that new, so something should exist, but I can't find anything...

If there really is nothing adequate, has anyone ever implemented it and could tell me how difficult it is getting there with standard means (DOM model plus XPath)? Just a rough estimate, would it be a matter of days or rather of weeks for 2 people working full time on it?

Answer 1

Did you have a look at the Apache Santuario library?

It comes with a class that implements XML Signature XPath Filter v2.0:

TransformXPath2Filter

Further implementations are listed here (though I haven't checked any of these):

XML Signature XPath Filter2 Interop Report

Answer 2

Thanks to 0xA3. The interoperability report lists the following two open source libraries that support XPath Filter 2:

• Apache Santuario
• xmlsec (C)

In our own analysis, we found out that the JDK-internal implementation of XML Digital Signatures also supports the feature, although in an implicit way, the implementation is not public API and hidden from the user. As the entire XML-DSIG implementation in the Sun/Oracle JDK, it uses a version of the Apache Santuario implementation internally.

We finally settled for Jaxen because it was easier to integrate than Santuario.