Skip to content

Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc) - #1088

Open
BarakSrour wants to merge 2 commits into
OpenIdentityPlatform:masterfrom
BarakSrour:harden/authxmlrequest-setprincipal-reflection
Open

Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc)#1088
BarakSrour wants to merge 2 commits into
OpenIdentityPlatform:masterfrom
BarakSrour:harden/authxmlrequest-setprincipal-reflection

Add AuthXMLRequestSecurityTest for setPrincipal class resolution

5f05b67
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

10 warnings
build-maven (ubuntu-latest, 25)
succeeded Jul 31, 2026 in 29m 51s