protectmetadata was not enforced for SP metadata.

Make sure metadata-converter.php requires an admin user

Disable the loading of external entities in XML documents.

Add coveralls support

& make phpunit dev dependency explicit.

Updated the composer.lock to install satooshi/php-coveralls

Add .coveralls.yml to stop errors.

Added coverage_clover pointing to correct location.

json_path now... anything to get bin/vendor/coveralls to actually execute!

Only push coverage reports for a single version of PHP

Add whitelist + exclusion files to coverage.

Reduce code coverage % by processing all files :-)

Beware adding additional directories for tests without setting up config + mocking the rest of the environment.

Don't show uncovered files.

Attempt upload for all PHP versions. Is this stacktrace always generated?

Return to "true" for uncovered files.

There is a path problem somewhere!

To prevent local and remote file inclusion attacks. This is in most cases
already disabled by default in system libraries, so this will be a no-op to
most systems, but to be safe we explicitly disable it also.

Fixes #74

This check was not ported to the saml2 module.

Depending on server configuration this may be used in a Denial Of Service attack by tying up all webserver workers with large POST bodies.

Depending on server configuration this may be used in a Denial Of Service attack by tying up all webserver workers with large POST bodies.

Fixes a bug in Memcache.php that would cause every fetch to also
result in a push if multiple memcache servers were being used.

If multiple memcache servers are in use, the code needs to check
if they aren't out of sync. If they are, the most recent data needs
to be pushed to all mirrors.

The original code compared the parsed data structures using ===,
but that always fails because that just does a pointer comparison
and not a deep comparison.

Changed the code to compare the original unparsed values instead.
Also added a few debug-level log statements.

add testing for php 5.6 and hhvm (allow failures)

Avoid the friendly names in attribute definitions to end up in the PHP generated metadata, as it creates trouble for the AttributeLimit filter and others.

Sort IdP's in alphabetical order in dropdown.

Only show languagebar when there's something to choose.

If you configure language.available to just one language, e.g. "en",
you get a language bar with just the unclickable word "English" which
is rather unuseful.