Vulnerable XML Service

XML Document:

<doc><n1>5</n1><n2>2</n2><div>5</div><mod>2</mod></doc>

XSLT Document:

<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
    <xsl:template match="doc">
        <HTML>
        
            <H1>Test for mod.</H1>
            <H2>XSLT Version:<xsl:value-of select="system-property('xsl:version')"/></H2>
            <HR/>
            <P>Should say "1": <xsl:value-of select="5 mod 2"/></P>
            <P>Should say "1": <xsl:value-of select="n1 mod n2"/></P>
            <P>Should say "-1": <xsl:value-of select="div mod mod"/></P>
            <P>
                <xsl:value-of select="div or ((mod)) | or"/>
            </P>
        </HTML>
    </xsl:template>
</xsl:stylesheet>

Transformation Result:

Message to sign:

<?xml version="1.0" encoding="UTF-8"?>
<AuthenticationToken id="0">
    <security id="1">
        <timestamp>01.04.2015:12:00:00</timestamp>
        <nonce>2dfgjkdft834gtg3</nonce>
        <destination>http://serviceA.com</destination>
    </security>
    <apiCall id="2">
        <user id="3">normalUser</user>
        <operations>getTime()</operations>
    </apiCall>
</AuthenticationToken>

References:

Reference IDs with a # or use xpath. Multiple references possibile with ;.
Examples: "#1", "#1;#2", "//*[@id=3]", "#1;//*[@id=3]"

Canocalization:

Inclusive, with Comments Inclusive, without Comments

Exclusive, with Comments Exclusive, without Comments

Type:

Enveloped Enveloping Detached

Signing Result:

Message to verify:

Verifier:

Verifier 1 Verifier 2 Verifier 3 Verifier 4 Verifier 5 Verifier 6

Verification Result/Application Data: