NAME

Net::SAML2::XML::Util

VERSION

version 0.25

SYNOPSIS

  my $xml = no_comments($xml);

NAME

Net::SAML2::XML::Util - XML Util class.

METHODS

no_comments( $xml )

Returns the XML passed as plain XML with the comments removed

This is to remediate CVE-2017-11427 XML Comments can allow for authentication bypass in SAML2 implementations

AUTHOR

Original Author: Chris Andrews <chrisa@cpan.org>

COPYRIGHT AND LICENSE

This software is copyright (c) 2020 by Chris Andrews and Others; in detail:

  Copyright 2019-2020  Timothy Legge

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.