Fixed one security bug pointed out by Ehsan Foroughi.
This commit is contained in:
@@ -850,9 +850,13 @@ class AuthnResponse(StatusResponse):
|
||||
"""
|
||||
|
||||
try:
|
||||
self._verify()
|
||||
except AssertionError:
|
||||
res = self._verify()
|
||||
except AssertionError as err:
|
||||
logger.error("Verification error on the response: %s" % err)
|
||||
raise
|
||||
else:
|
||||
if res is None:
|
||||
return None
|
||||
|
||||
if not isinstance(self.response, samlp.Response):
|
||||
return self
|
||||
|
Reference in New Issue
Block a user