Fixed one security bug pointed out by Ehsan Foroughi.
This commit is contained in:
@@ -850,9 +850,13 @@ class AuthnResponse(StatusResponse):
|
|||||||
"""
|
"""
|
||||||
|
|
||||||
try:
|
try:
|
||||||
self._verify()
|
res = self._verify()
|
||||||
except AssertionError:
|
except AssertionError as err:
|
||||||
|
logger.error("Verification error on the response: %s" % err)
|
||||||
raise
|
raise
|
||||||
|
else:
|
||||||
|
if res is None:
|
||||||
|
return None
|
||||||
|
|
||||||
if not isinstance(self.response, samlp.Response):
|
if not isinstance(self.response, samlp.Response):
|
||||||
return self
|
return self
|
||||||
|
Reference in New Issue
Block a user