Fixed one security bug pointed out by Ehsan Foroughi.

This commit is contained in:
Roland Hedberg
2015-02-03 09:17:46 +01:00
parent 6235254421
commit d21ac9a70b

View File

@@ -850,9 +850,13 @@ class AuthnResponse(StatusResponse):
"""
try:
self._verify()
except AssertionError:
res = self._verify()
except AssertionError as err:
logger.error("Verification error on the response: %s" % err)
raise
else:
if res is None:
return None
if not isinstance(self.response, samlp.Response):
return self