This works for any Java application that handles XML signatures — in theory. The big caveat is that secureValidation disables all XSLT transformations, but that was only turned on by default in ...