A second root element: SAML signature bypass in passport-saml
An XML signature covers an element, not a file, and passport-saml picked its element two different ways.
found by Felix Wilhelm, Google Project Zero
An XML signature covers an element, not a file, and passport-saml picked its element two different ways.
found by Felix Wilhelm, Google Project Zero