Skip to content

Commit 791fc2c

Browse files
committed
Update CHANGELOG
1 parent 7f887b4 commit 791fc2c

File tree

1 file changed

+12
-7
lines changed

1 file changed

+12
-7
lines changed

CHANGELOG.md

Lines changed: 12 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
11
# Ruby SAML Changelog
22

3+
### 1.18.0 (???)
4+
* [#718](https://github.com/SAML-Toolkits/ruby-saml/pull/718/) Add support to retrieve from SAMLResponse the AuthnInstant and AuthnContextClassRef values
5+
* [#720](https://github.com/SAML-Toolkits/ruby-saml/pull/720) Fix ambiguous regex warnings
6+
* [#715](https://github.com/SAML-Toolkits/ruby-saml/pull/715) Fix typo in SPNameQualifier error text
7+
38
### 1.17.0 (Sep 10, 2024)
49
* Fix for critical vulnerability CVE-2024-45409: SAML authentication bypass via Incorrect XPath selector
510
* [#687](https://github.com/SAML-Toolkits/ruby-saml/pull/687) Add CI coverage for Ruby 3.3 and Windows.
@@ -15,7 +20,7 @@
1520

1621
### 1.15.0 (Jan 04, 2023)
1722
* [#650](https://github.com/SAML-Toolkits/ruby-saml/pull/650) Replace strip! by strip on compute_digest method
18-
* [#638](https://github.com/SAML-Toolkits/ruby-saml/pull/638) Fix dateTime format for the validUntil attribute of the generated metadata
23+
* [#638](https://github.com/SAML-Toolkits/ruby-saml/pull/638) Fix dateTime format for the validUntil attribute of the generated metadata
1924
* [#576](https://github.com/SAML-Toolkits/ruby-saml/pull/576) Support `Settings#idp_cert_multi` with string keys
2025
* [#567](https://github.com/SAML-Toolkits/ruby-saml/pull/567) Improve Code quality
2126
* Add info about new repo, new maintainer, new security contact
@@ -52,7 +57,7 @@
5257

5358
### 1.12.0 (Feb 18, 2021)
5459
* Support AES-128-GCM, AES-192-GCM, and AES-256-GCM encryptions
55-
* Parse & return SLO ResponseLocation in IDPMetadataParser & Settings
60+
* Parse & return SLO ResponseLocation in IDPMetadataParser & Settings
5661
* Adding idp_sso_service_url and idp_slo_service_url settings
5762
* [#536](https://github.com/onelogin/ruby-saml/pull/536) Adding feth method to be able retrieve attributes based on regex
5863
* Reduce size of built gem by excluding the test folder
@@ -184,7 +189,7 @@
184189
* Fix response_test.rb of gem 1.3.0
185190
* Add reference to Security Guidelines
186191
* Update License
187-
* [#334](https://github.com/onelogin/ruby-saml/pull/334) Keep API backward-compatibility on IdpMetadataParser fingerprint method.
192+
* [#334](https://github.com/onelogin/ruby-saml/pull/334) Keep API backward-compatibility on IdpMetadataParser fingerprint method.
188193

189194
### 1.3.0 (June 24, 2016)
190195
* [Security Fix](https://github.com/onelogin/ruby-saml/commit/a571f52171e6bfd87db59822d1d9e8c38fb3b995) Add extra validations to prevent Signature wrapping attacks
@@ -202,7 +207,7 @@
202207
* [#316](https://github.com/onelogin/ruby-saml/pull/316) Fix Misspelling of transation_id to transaction_id
203208
* [#321](https://github.com/onelogin/ruby-saml/pull/321) Support Attribute Names on IDPSSODescriptor parser
204209
* Changes on empty URI of Signature reference management
205-
* [#320](https://github.com/onelogin/ruby-saml/pull/320) Dont mutate document to fix lack of reference URI
210+
* [#320](https://github.com/onelogin/ruby-saml/pull/320) Dont mutate document to fix lack of reference URI
206211
* [#306](https://github.com/onelogin/ruby-saml/pull/306) Support WantAssertionsSigned
207212

208213
### 1.1.2 (February 15, 2016)
@@ -219,17 +224,17 @@
219224
* [#270](https://github.com/onelogin/ruby-saml/pull/270) Allow SAML elements to come from any namespace (at decryption process)
220225
* [#261](https://github.com/onelogin/ruby-saml/pull/261) Allow validate_subject_confirmation Response validation to be skipped
221226
* [#258](https://github.com/onelogin/ruby-saml/pull/258) Fix allowed_clock_drift on the validate_session_expiration test
222-
* [#256](https://github.com/onelogin/ruby-saml/pull/256) Separate the create_authentication_xml_doc in two methods.
227+
* [#256](https://github.com/onelogin/ruby-saml/pull/256) Separate the create_authentication_xml_doc in two methods.
223228
* [#255](https://github.com/onelogin/ruby-saml/pull/255) Refactor validate signature.
224-
* [#254](https://github.com/onelogin/ruby-saml/pull/254) Handle empty URI references
229+
* [#254](https://github.com/onelogin/ruby-saml/pull/254) Handle empty URI references
225230
* [#251](https://github.com/onelogin/ruby-saml/pull/251) Support qualified and unqualified NameID in attributes
226231
* [#234](https://github.com/onelogin/ruby-saml/pull/234) Add explicit support for JRuby
227232

228233
### 1.0.0 (June 30, 2015)
229234
* [#247](https://github.com/onelogin/ruby-saml/pull/247) Avoid entity expansion (XEE attacks)
230235
* [#246](https://github.com/onelogin/ruby-saml/pull/246) Fix bug generating Logout Response (issuer was at wrong order)
231236
* [#243](https://github.com/onelogin/ruby-saml/issues/243) and [#244](https://github.com/onelogin/ruby-saml/issues/244) Fix metadata builder errors. Fix metadata xsd.
232-
* [#241](https://github.com/onelogin/ruby-saml/pull/241) Add decrypt support (EncryptID and EncryptedAssertion). Improve compatibility with namespaces.
237+
* [#241](https://github.com/onelogin/ruby-saml/pull/241) Add decrypt support (EncryptID and EncryptedAssertion). Improve compatibility with namespaces.
233238
* [#240](https://github.com/onelogin/ruby-saml/pull/240) and [#238](https://github.com/onelogin/ruby-saml/pull/238) Improve test coverage and refactor.
234239
* [#239](https://github.com/onelogin/ruby-saml/pull/239) Improve security: Add more validations to SAMLResponse, LogoutRequest and LogoutResponse. Refactor code and improve tests coverage.
235240
* [#237](https://github.com/onelogin/ruby-saml/pull/237) Don't pretty print metadata by default.

0 commit comments

Comments
 (0)