|
1 | 1 | CHANGELOG
|
2 | 2 | =========
|
| 3 | + |
| 4 | + |
| 5 | +v3.7.0 |
| 6 | +* [#586](https://github.com/SAML-Toolkits/php-saml/pull/586) IdPMetadataParser::parseRemoteXML - Add argument for setting whether to validate peer SSL certificate |
| 7 | +* [#585](https://github.com/SAML-Toolkits/php-saml/pull/585) Declare conditional return types |
| 8 | +* Make Saml2\Auth can accept a param $spValidationOnly |
| 9 | +* [#577](https://github.com/SAML-Toolkits/php-saml/pull/577) Allow empty NameID value when no strict or wantNameId is false |
| 10 | +* [#570](https://github.com/SAML-Toolkits/php-saml/pull/570) Support X509 cert comments |
| 11 | +* [#569](https://github.com/SAML-Toolkits/php-saml/pull/569) Add parameter to exclude validUntil on SP Metadata XML |
| 12 | +* [#551](https://github.com/SAML-Toolkits/php-saml/pull/551) Fix compatibility with proxies that extends HTTP_X_FORWARDED_HOST |
| 13 | +* [#487](https://github.com/SAML-Toolkits/php-saml/issues/487) Enable strict check on in_array method |
| 14 | +* Make Saml2\Auth can accept a param $spValidationOnly |
| 15 | +* Fix typos on readme. |
| 16 | +* Add warning about Open Redirect and Reply attacks |
| 17 | +* Add warning about the use of IdpMetadataParser class. If Metadata URLs |
| 18 | + are provided by 3rd parties, the URL inputs MUST be validated to avoid issues like SSRF |
| 19 | +* Fix test payloads |
| 20 | +* Remove references to OneLogin. |
| 21 | + |
3 | 22 | v3.6.1
|
4 | 23 | * [#467](https://github.com/onelogin/php-saml/issues/467) Fix bug on getSelfRoutedURLNoQuery method
|
5 | 24 |
|
@@ -58,7 +77,7 @@ v.3.1.1
|
58 | 77 |
|
59 | 78 | v.3.1.0
|
60 | 79 | * Security improvement suggested by Nils Engelbertz to prevent DDOS by expansion of internally defined entities (XEE)
|
61 |
| -* Fix setting_example.php servicename parameter |
| 80 | +* Fix setting_example.php servicename parameter |
62 | 81 |
|
63 | 82 | v.3.0.0
|
64 | 83 | * Remove mcrypt dependency. Compatible with PHP 7.2
|
@@ -226,7 +245,7 @@ v.2.7.0
|
226 | 245 | * Fix PHP 7 error (used continue outside a loop/switch).
|
227 | 246 | * Fix bug on organization element of the SP metadata builder.
|
228 | 247 | * Fix typos on documentation. Fix ALOWED Misspell.
|
229 |
| -* Be able to extract RequestID. Add RequestID validation on demo1. |
| 248 | +* Be able to extract RequestID. Add RequestID validation on demo1. |
230 | 249 | * Add $stay parameter to login, logout and processSLO method.
|
231 | 250 |
|
232 | 251 | v.2.6.1
|
|
0 commit comments