Summary: Dependencies on Xalan despite documentation stating
it's not required
Version: Java 1.4.2
AssignedTo: security-dev@... ReportedBy: mark@...
XMLSec has dependencies on the Xalan jar.
The instance we've run into is:
XMLCipher depends on org.apache.xml.utils.URI.
The release notes for 1.3 said it wasn't necessary to put xalan on the
classpath and the pom file indicates it's a "provided" dependency, which I take
to mean the XSLT implementation provided by Java 5+ is good enough.