Update changelog

Author: pitbulk

CHANGELOG

@@ -1,5 +1,14 @@
 CHANGELOG
 =========
+v.3.4.0
+* Support rejecting unsolicited SAMLResponses. 
+* Reject SAMLResponse if requestID was provided to the validotr but the InResponseTo attributeof the SAMLResponse is missing
+* Check destination against the getSelfURLNoQuery as well on LogoutRequest and LogoutResponse as we do on Response
+* Improve getSelfRoutedURLNoQuery method
+* Only add responseUrl to the settings if ResponseLocation present in the IdPMetadataParser
+* Remove use of $_GET on static method validateBinarySign
+* Fix error message when Assertion and NameId are both encrypted (not supported)
+
 v.3.3.1
 * Update xmlseclibs to 3.0.4
 * Remove Comparison atribute from RequestedAuthnContext when setting has empty value

src/Saml2/version.json

@@ -1,6 +1,6 @@
 {
     "php-saml": {
-        "version": "3.3.1",
+        "version": "3.4.0",
         "released": "06/11/2019"
     }
 }

tests/src/OneLogin/Saml2/ResponseTest.php

@@ -1358,7 +1358,7 @@ public function testIsInValidNoInResponseTo()
 
         $response->isValid();
         $this->assertContains('No Signature found. SAML Response rejected', $response->getError());
-        
+
         $response->isValid($inResponseTo);
         $this->assertEquals('No InResponseTo at the Response, but it was provided the requestId related to the AuthNRequest sent by the SP: '.$inResponseTo, $response->getError());
     }