search

zendesk / samlr

Clean room implementation of SAML for Ruby
Apache License 2.0
30 stars 12 forks source link

Assertion#attributes modified to include nil attributes #26

Closed mathurn-zz closed 7 years ago

mathurn-zz commented 7 years ago

@zendesk/secdev 🐙 @grosser @morten

Currently, Assertion#attributes skips over nil attributes. This prevents an IdP from clearing out an existing attribute.

Assertion#attributes has always skipped over nil attributes: a5876622254d35c8d3872c6852c8d1289b0f4f26