diff --git a/README.md b/README.md index 5f6865a5..0f988a1c 100644 --- a/README.md +++ b/README.md @@ -14,6 +14,8 @@ Python3: [python3-saml](https://github.com/onelogin/python3-saml). #### Warning #### +Version 2.7.0 sets strict mode active by default + Update ``python-saml`` to ``2.5.0``, this version includes security improvements for preventing XEE and Xpath Injections. Update ``python-saml`` to ``2.4.0``, this version includes a fix for the [CVE-2017-11427](https://www.cvedetails.com/cve/CVE-2017-11427/) vulnerability. diff --git a/changelog.md b/changelog.md index 97fbc946..8ce586f9 100644 --- a/changelog.md +++ b/changelog.md @@ -1,4 +1,7 @@ # python-saml changelog +### 2.7.0 (Sep 11, 2019) +* Set true as the default value for strict setting + ### 2.6.0 (Jul 02, 2019) * Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from SAMLResponse. Adjusted single logout service to provide NameQualifier and SPNameQualifier to logout method. Add getNameIdNameQualifier to Auth and SamlResponse. Extend logout method from Auth and LogoutRequest constructor to support SPNameQualifier parameter. Align LogoutRequest constructor with SAML specs * Added get_in_response_to method to Response and LogoutResponse classes diff --git a/setup.py b/setup.py index 462bf96f..7d545fb0 100644 --- a/setup.py +++ b/setup.py @@ -9,7 +9,7 @@ setup( name='python-saml', - version='2.6.0', + version='2.7.0', description='Onelogin Python Toolkit. Add SAML support to your Python software using this library', classifiers=[ 'Development Status :: 5 - Production/Stable',