search

IdentityPython / djangosaml2

Django SAML2 Service Provider based on pySAML2
Apache License 2.0
258 stars 143 forks source link

Fix XSS in next_path url param #359

Closed Gee19 closed 1 year ago

Gee19 commented 1 year ago

Not sure if this is the best place for this or directly in the get_next_path method.

peppelinux commented 1 year ago

unfortunately the tests doesn't pass

can you please check?

peppelinux commented 1 year ago

ok, please change the version to 1.5.4 here https://github.com/IdentityPython/djangosaml2/blob/master/setup.py#L30

we'll ahve a new release asap thanks to your contribution

Gee19 commented 1 year ago

@peppelinux can you create a pypi release if possible? I'd like to run some tests with these changes :pray:

peppelinux commented 1 year ago

mmh.. it's very strange, the pypi github actions failed this time!

anyway, here it go https://pypi.org/project/djangosaml2/1.5.4/