XML signature wrapping
XML-signatuuripakendus
olemus
signeeritud dokumendi sisu muutmine signatuuri kahjustamata, toetudes elemendile wrapper
= changing the contents of a signed document without damaging the signature, relying on the wrapper element
ülevaateid
http://coheigea.blogspot.com.ee/2012/10/xml-signature-wrapping-attacks-on-web.html
https://www.blackhat.com/presentations/bh-usa-07/Hill/Whitepaper/bh-usa-07-hill-WP.pdf
http://www.ws-attacks.org/XML_Signature_Wrapping
tõrje
https://www.wati.com/the-silent-assassins-understanding-signature-wrapping-attacks/
https://secops.group/xml-signature-wrapping/
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder-federation-standalone/12-52-01/upgrading/protect-against-xml-signature-wrapping-attacks.html