Skip to content
Snippets Groups Projects
  1. Oct 09, 2018
  2. Aug 22, 2018
  3. Aug 13, 2018
  4. May 31, 2018
  5. Jan 11, 2017
  6. Jan 10, 2017
  7. Jul 28, 2016
    • Jaime Pérez's avatar
      Remove debugging leftovers. · f261dfc1
      Jaime Pérez authored
      f261dfc1
    • Jaime Pérez's avatar
      bugfix: Allow attributes to contain raw XML as their values. · 977b8e86
      Jaime Pérez authored
      A recent change in simplesamlphp/saml2#60 made the library return a DOMNodeList object when the contents of the AttributeValue element are not text. This lead to a bug, since the returned value is not serializable, and when storing it in the session it will go away as soon as we serialize the session to store it in the backend (whatever that is). This is always, as the SP will always redirect to the URL originating authentication. The result was an empty DOMNodeList object where there should be some value.
      
      This commit makes the SimpleSAML_Session to implement the Serializable interface. When obtaining the attributes during login (doLogin() method), the code will now look for DOMNodeList objects, and dump them as a string with the XML representation of their contents in the 'RawAttributes' array inside $this->authData[$authority]. This allows us to parse the XML back when unserializing, and restore the original DOMNodeList object as the value of the attribute.
      
      The issue was reported originally in the mailing list by Enrico Cavalli, affecting eduPersonTargetedID. This resolves #424.
      977b8e86
  8. Feb 05, 2016
  9. Jan 14, 2016
    • Hanne Moa's avatar
      Refactor SimpleSAML_XHTML_Template · d2759355
      Hanne Moa authored
      A template now has a translator-object, SimpleSAML_Locale_Translate.
      This handles the existing translation system.
      
      The translator has a language-object, SimpleSAML_Locale_Language. This
      handles discovery and switching of locale.
      
      SimpleSAML_XHTML_Template has several methods that are wrapped
      translator-methods:
      
      t()
      isLanguageRTL()
      getLanguageList()
      getTranslation()
      
      This way it isn't necessary to change much of the existing system.
      d2759355
  10. Oct 21, 2014
  11. May 23, 2013
  12. Dec 12, 2011
  13. Jul 22, 2011
  14. Oct 25, 2010
  15. Oct 21, 2010
  16. Jul 29, 2010
    • Olav Morken's avatar
      templates/status: Fix cross-site scripting. · c7c8e778
      Olav Morken authored
      If simpleSAMLphp is configured with a attribute hook that creates
      attribute values containing associative arrays, and is displaying
      attributes from an untrusted IdP, it can lead to cross-site scripting.
      
      (Note that the feature allowing for attribute values with associative
      arrays is believed to be unused, and will be removed in a future
      release.)
      
      git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2434 44740490-163a-0410-bde0-09ae8108e29a
      c7c8e778
  17. Aug 28, 2009
  18. Jan 26, 2009
  19. Jan 13, 2009
  20. Oct 31, 2008
  21. Jul 02, 2008
  22. Mar 26, 2008
  23. Mar 25, 2008
  24. Feb 27, 2008
  25. Feb 15, 2008
  26. Jan 30, 2008
  27. Jan 28, 2008
  28. Dec 14, 2007
  29. Oct 21, 2007
  30. Oct 20, 2007
  31. Sep 14, 2007
Loading