Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

saml2-js

Package Overview
Dependencies
Maintainers
5
Versions
60
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

saml2-js - npm Package Compare versions

Comparing version 2.1.0 to 3.0.0

test/data/good_response_twice_signed_dsig_ns_at_top.xml

9

lib-js/saml2.js

@@ -353,6 +353,7 @@ // Generated by CoffeeScript 1.12.7

check_saml_signature = function(xml, certificate) {
var doc, sig, signature, valid;
check_saml_signature = function(_xml, certificate) {
var doc, sig, signature, valid, xml;
xml = _xml.replace(/\r\n?/g, '\n');
doc = (new xmldom.DOMParser()).parseFromString(xml);
signature = xmlcrypto.xpath(doc, "./*[local-name(.)='Signature' and namespace-uri(.)='http://www.w3.org/2000/09/xmldsig#']");
signature = xmlcrypto.xpath(doc.documentElement, "./*[local-name(.)='Signature' and namespace-uri(.)='http://www.w3.org/2000/09/xmldsig#']");
if (signature.length !== 1) {

@@ -367,3 +368,3 @@ return null;

};
sig.loadSignature(signature[0].toString());
sig.loadSignature(signature[0]);
valid = sig.checkSignature(xml);

@@ -370,0 +371,0 @@ if (valid) {

{
"name": "saml2-js",
"version": "2.1.0",
"version": "3.0.0",
"description": "SAML 2.0 node helpers",

@@ -37,3 +37,3 @@ "author": "Clever",

"underscore": "^1.8.0",
"xml-crypto": "^0.10.0",
"xml-crypto": "^2.0.0",
"xml-encryption": "^1.2.1",

@@ -40,0 +40,0 @@ "xml2js": "^0.4.0",

Sorry, the diff of this file is not supported yet

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc