SWS-989 - Skip validation if validation actions is empty or NO_SECURITY

Alexandru-Constantin Bledea · gregturn · commit 2398d6c64820 · 2017-07-10T13:39:40.000-05:00
diff --git a/spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java b/spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java
@@ -643,7 +643,7 @@ protected void validateMessage(SoapMessage soapMessage, MessageContext messageCo
 			logger.debug("Validating message [" + soapMessage + "] with actions [" + validationActions + "]");
 		}
 
-		if (validationActionsVector.contains(WSConstants.NO_SECURITY)) {
+		if (CollectionUtils.isEmpty(validationActionsVector) || validationActionsVector.contains(WSConstants.NO_SECURITY)) {
 			return;
 		}
 

Original file line number	Diff line number	Diff line change
`@@ -643,7 +643,7 @@ protected void validateMessage(SoapMessage soapMessage, MessageContext messageCo`
`643`	`643`	`logger.debug("Validating message [" + soapMessage + "] with actions [" + validationActions + "]");`
`644`	`644`	`}`
`645`	`645`
`646`		`- if (validationActionsVector.contains(WSConstants.NO_SECURITY)) {`
	`646`	`+ if (CollectionUtils.isEmpty(validationActionsVector) \|\| validationActionsVector.contains(WSConstants.NO_SECURITY)) {`
`647`	`647`	`return;`
`648`	`648`	`}`
`649`	`649`