eXist-db / existdb-saml

XQuery module that implements SAML v2 single sign-on
GNU Lesser General Public License v2.1
4 stars 3 forks source link

The SAML response should be a well-formed XML document #26

Closed adamretter closed 11 months ago

adamretter commented 1 year ago

The SAML response should be a well-formed XML document and not a fragment, so we should not try and parse it as a fragment.

Additionally there is a current bug in eXist-db whereby if the SAML response includes an XML Declaration then fn:parse-xml-fragment#1 will throw an incorrect error, for example the following valid XQuery raises an error in eXist-db:

fn:parse-xml-fragment('<?xml version="1.0" encoding="UTF-8" ?>
<hello>world</hello>')