* Migrate email utils to non-static

* Migrate http utils to non-static

* Migrate net utils to non-static

* Migrate random utils to non-static

* Migrate system utils to non-static

* Migrate time utils to non-static

* Migrate xml utils to non-static

* Upgrade notes

* Update test-framework

* Fix tests

Improve error handling

Convert to our wrapper class for assertions

* Migrate assertions to Webmozart

* Added Kernel class to handle request

* Kernel handle request

Kernel is loaded in SimpleSAML\Module class
Removed Router and ControllerResolver classes

* Added route command (squash)

* Use symfony application and cache

* Updated to today's standards

* Fix for Symfony4 & Catch environment from ENV variable

* Standardize location of routes/services files

* Trying to make slashes work properly in all situations

* Convert XML to YML

* Fix some template-names and endpoints

* Rename Controller-classes

* Update dependencies

* Fix routing files

* TooManyArguments

* Fix TypeCoercion

* PSR-12

* Fix rebase mistake

* Rebase lock-file

* Fix Psalm

* Add strict_types declaration

Co-authored-by: Sergio Gómez <decano@gmail.com>

This allows us to still validate XML documents (disabling the entity loader makes it impossible, as we have multiple schemas in different files), while protecting against schemas trying to import from URLs.

This reverts commit 961f5250.

This is done already when creating the document, but here we should protect as well against rogue schema files.

PSR-12 compliancy

This used to be like this, but got changed in 67dc1b15, which seems like an accidental action?
This takes care of #894

It actually needs a DOMNode, so it has been renamed to isDOMNodeOfType().

Additionally, some superfluous asserts() have been removed, and SimpleSAML\Utils\XML::getDOMChildren() has also changed its signature, as it should also receive a DOMNode, not a DOMElement.

Some things, like logging of SAML messages or backtraces, are controlled with the 'debug' configuration option. However, it might be possible that we don't want one while we want the other, but that's impossible with just one option.

This commit allows us to configure debugging options independently, but groupping all of them together. This is particularly useful if we want to log backtraces to debug errors, for example, but we don't want to log SAML messages to keep the privacy of the users. This also allows us to get rid of the 'debug.validatexml' configuration option, and group it with other debug options.

This changes are backwards-compatible. Old and new configurations will work at the same time.