You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,6 +14,8 @@ This version supports Python3. There is a separate version that only support Pyt
14
14
15
15
#### Warning ####
16
16
17
+
Version 1.8.0 sets strict mode active by default
18
+
17
19
Update ``python3-saml`` to ``1.5.0``, this version includes security improvements for preventing XEE and Xpath Injections.
18
20
19
21
Update ``python3-saml`` to ``1.4.0``, this version includes a fix for the [CVE-2017-11427](https://www.cvedetails.com/cve/CVE-2017-11427/) vulnerability.
Copy file name to clipboardExpand all lines: changelog.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,8 @@
1
1
# python3-saml changelog
2
-
### 1.7.1 (unrelease)
3
-
* Drop python3.4 support
2
+
### 1.8.0 (Sep 11, 2019)
3
+
* Set true as the default value for strict setting
4
+
*[#152](https://github.com/onelogin/python3-saml/pull/152/files) Don't clean xsd and xsi namespaces
5
+
* Drop python3.4 support due lxml. See lxml 4.4.0 (2019-07-27)
4
6
5
7
### 1.7.0 (Jul 02, 2019)
6
8
* Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from SAMLResponse. Adjusted single logout service to provide NameQualifier and SPNameQualifier to logout method. Add getNameIdNameQualifier to Auth and SamlResponse. Extend logout method from Auth and LogoutRequest constructor to support SPNameQualifier parameter. Align LogoutRequest constructor with SAML specs
0 commit comments