search

IdentityPython / djangosaml2

Django SAML2 Service Provider based on pySAML2
Apache License 2.0
258 stars 143 forks source link

Fix XSS in the idp url parameter #368

Closed brianvans closed 1 year ago

brianvans commented 1 year ago

This PR fixes an XSS issue in the login view where arbitrary input from the idp parameter can end up in the resulting html unescaped.

peppelinux commented 1 year ago

Hi @brianvans

It looks very good and sorry for the late in the answer! I just ask you to add a small change before approving, merging and having a new release.

If you can't do that soon, I can do it, just tell me