spring-attic / spring-security-saml

SAML extension for the Spring Security project
Other
419 stars 484 forks source link

VelocityFactory sets invalid properties #512

Open OrangeDog opened 3 years ago

OrangeDog commented 3 years ago

This may be (the deprecations certainly are) because I upgraded Velocity to 2.3 for a CVE (#511). I haven't checked the old version.

VelocityFactory has some issues:

Workaround is to ignore VelocityFactory and just make the bean yourself. See also #152.